Edit tour

Windows Analysis Report
https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'

Overview

General Information

Sample URL:	https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'
Analysis ID:	1559006
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,11247993354994930202,17522058245129960526,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 02:17:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeexpires: Wed, 20 Nov 2024 03:17:26 GMTstrict-transport-security: max-age=15724800; preloadtiming-allow-origin: *vary: Accept-Encodingx-buildname: hoothootx-buildnumber: 1528792020x-content-type-options: nosniffx-datacenter: gce-us-east1x-hostname: fen-hoothoot-us-east1-chmcvia: 1.1 googlealt-svc: h3=":443"; ma=86400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8e54f192c8df8c65-EWR

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49763 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/5@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,11247993354994930202,17522058245129960526,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,11247993354994930202,17522058245129960526,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://prettylearning.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
prettylearning.com	104.18.25.111	true	false		high
www.google.com	216.58.206.68	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'	false		unknown
https://prettylearning.com/favicon.ico	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.25.111	prettylearning.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.24.111	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559006
Start date and time:	2024-11-20 03:16:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/5@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.78, 173.194.76.84, 34.104.35.123, 93.184.221.240, 192.229.221.95, 172.217.23.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2204)
Category:	downloaded
Size (bytes):	5340
Entropy (8bit):	5.103216255396954
Encrypted:	false
SSDEEP:	96:N8blYBTTk8IU8h2E0OLTWHDXj8zYLpGYM76YrG0Gu98FUcjOFQm1I:N8v/U8h2aIczTYuGlU8OFQuI
MD5:	0D7F9D64845EC95CB4080D6A115A751A
SHA1:	0178AC32AB4A839E42F998EB103C530F63484639
SHA-256:	A30C589C0B8A63D3D28D69BEB2B1B76165813984B066F916C24715F637041F45
SHA-512:	14E6055F4F45D30EDF11490BDBF4EE08396C1B7C7F731BBF8A93A374A8EF5D95F1F5E69719838BB01E4365E6020383D0861D93171CA7CC59C78181971A54F546
Malicious:	false
Reputation:	low
URL:	https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'
Preview:	<!doctype html><html>.<head>. <title>404 Not Found</title>. <style>. html{margin:0;padding:0;background:#fff;font-family:Arial;height:100%}. body{padding:20px;color:#3b476b;line-height:18px;height:100%}. h2{font-size:1.5em;margin-bottom:30px}. h3,label{font-size:1.33em;margin:0 0 10px 0;font-weight:200}. label:hover{cursor:pointer}. section{max-width:600px;margin:0 auto 0;padding:30px 0 30px 0;border-bottom:solid 1px #eaecf2;}. section:first-child{padding-top:0}. section:last-child{border:none}. p{margin-bottom:15px}. p:last-child{margin-bottom:0}. .c{max-height:0;overflow:hidden}. input{display:none}. input:checked+label+*{max-height:100%}. </style>.</head>.<body>. <div style="position:fixed;bottom:10px;left:10px">. <input id="dc" class="t" type="checkbox" />. <label for="dc">Details</label>. <p class="c">Hostname: fen-hoothoot-us-east1-chmc<br />Datacenter: gce-us-east1</p>. </div>. <section style="top:50%;transform:translateY(-50

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	dropped
Size (bytes):	198
Entropy (8bit):	1.23143406345007
Encrypted:	false
SSDEEP:	3:2oXllvlNl/FXltlBe/h/555555555555555n:2Y1UJ555555555555555n
MD5:	C6ACEDAFF906029FC5455D9EC52C7F42
SHA1:	92CBD806CA421AA2C9FF5E1FF76BBC20913A2F81
SHA-256:	9DEB629637088856FE61DC868BF40A7D21ED942E4117659F3D6C3408F59B906B
SHA-512:	7A8D002CA6B607E38860AD4485493E109CB7D3BEF241B0E5BF2A65C2E316E6185DED8EC74E3FCBD78745AB302C6D876657ABC178EE028D1B8B9A5572F429D972
Malicious:	false
Reputation:	low
Preview:	......................(....... .......................................................................................................................................................................

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	downloaded
Size (bytes):	198
Entropy (8bit):	1.23143406345007
Encrypted:	false
SSDEEP:	3:2oXllvlNl/FXltlBe/h/555555555555555n:2Y1UJ555555555555555n
MD5:	C6ACEDAFF906029FC5455D9EC52C7F42
SHA1:	92CBD806CA421AA2C9FF5E1FF76BBC20913A2F81
SHA-256:	9DEB629637088856FE61DC868BF40A7D21ED942E4117659F3D6C3408F59B906B
SHA-512:	7A8D002CA6B607E38860AD4485493E109CB7D3BEF241B0E5BF2A65C2E316E6185DED8EC74E3FCBD78745AB302C6D876657ABC178EE028D1B8B9A5572F429D972
Malicious:	false
Reputation:	low
URL:	https://prettylearning.com/favicon.ico
Preview:	......................(....... .......................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:17:14.491368055 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 03:17:24.092211008 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 03:17:25.642731905 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.642756939 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:25.642888069 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.643136024 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.643155098 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:25.643510103 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.643538952 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:25.644002914 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.644186974 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:25.644201994 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.125272989 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.125632048 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.125644922 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.126667023 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.126729965 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.127943993 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.128005028 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.128189087 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.128196955 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.132606030 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.132822990 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.132842064 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.136516094 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.136595011 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.136964083 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.137159109 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.195760965 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.300168037 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.300193071 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.300224066 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.300236940 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.300298929 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.300326109 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.300364017 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.300364017 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.302361965 CET	49735	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.302377939 CET	443	49735	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.330961943 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.330969095 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.383306980 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.423358917 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.501605988 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.501830101 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.501959085 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.503998995 CET	49736	443	192.168.2.4	104.18.25.111
Nov 20, 2024 03:17:26.504014015 CET	443	49736	104.18.25.111	192.168.2.4
Nov 20, 2024 03:17:26.523757935 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:26.523853064 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:26.527158976 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:26.527398109 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:26.527434111 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.166974068 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.195113897 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.195182085 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.196697950 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.196784973 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.231560946 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.231695890 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.232393980 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.232444048 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.287328959 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.343302965 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.343486071 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:27.343590975 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.390629053 CET	49738	443	192.168.2.4	104.18.24.111
Nov 20, 2024 03:17:27.390671968 CET	443	49738	104.18.24.111	192.168.2.4
Nov 20, 2024 03:17:28.186923981 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.186984062 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.187051058 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.187304020 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.187349081 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.836878061 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.837304115 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.837335110 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.838777065 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.838846922 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.840097904 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.840190887 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.880264997 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:28.880279064 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:28.927077055 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:29.532836914 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:29.532883883 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:29.532948971 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:29.534638882 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:29.534658909 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.278496027 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.278580904 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.282254934 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.282274961 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.282691956 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.330147982 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.371340990 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.602394104 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.602561951 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.602652073 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.602652073 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.602735996 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.602776051 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.635473013 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.635515928 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:30.635606050 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.636001110 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:30.636022091 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.354737997 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.354824066 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.356894016 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.356903076 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.357225895 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.358542919 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.403322935 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.819597006 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.819802046 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.820399046 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.820919037 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.820936918 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:31.820952892 CET	49744	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:17:31.820960045 CET	443	49744	184.28.90.27	192.168.2.4
Nov 20, 2024 03:17:36.903472900 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:36.903496981 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:36.903821945 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:36.904879093 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:36.904894114 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:37.612164021 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:37.612255096 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:37.615964890 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:37.615981102 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:37.616404057 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:37.662199974 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.350759983 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.359369993 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 03:17:38.364562035 CET	80	49723	199.232.214.172	192.168.2.4
Nov 20, 2024 03:17:38.364624023 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 03:17:38.391324997 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582323074 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582384109 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582407951 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582451105 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582462072 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582494974 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582508087 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582515001 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582530975 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582552910 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582566023 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582689047 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582762003 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.582773924 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582906008 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:38.582959890 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:38.748449087 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:38.748579979 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:38.748779058 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:38.993415117 CET	49742	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:17:38.993479967 CET	443	49742	216.58.206.68	192.168.2.4
Nov 20, 2024 03:17:39.248346090 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:39.248372078 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:17:39.248402119 CET	49745	443	192.168.2.4	172.202.163.200
Nov 20, 2024 03:17:39.248410940 CET	443	49745	172.202.163.200	192.168.2.4
Nov 20, 2024 03:18:15.753015041 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:15.753089905 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:15.753211975 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:15.753576040 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:15.753611088 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:15.903637886 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:15.903671026 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:15.903759003 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:15.904300928 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:15.904314041 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.528335094 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.528558969 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.532078028 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.532100916 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.532356977 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.540853977 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.568963051 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.569030046 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.575968027 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.575982094 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.576384068 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.583369970 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.583539963 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.627336979 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.685437918 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.685492039 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.685534000 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.685563087 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.685580969 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.685611963 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.685631990 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.786576033 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.786634922 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.786693096 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.786705971 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.786729097 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.786747932 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.788094044 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.788156033 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.788194895 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.788203001 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.788249969 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.788249969 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.870023966 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.870084047 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.870126963 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.870235920 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.870256901 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.870309114 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.871025085 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.871083975 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.871099949 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.871108055 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.871148109 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.871155977 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.871201992 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.871225119 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.871282101 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.874111891 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.874180079 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.874207020 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.874237061 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.874255896 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.874286890 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.875181913 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.875232935 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.875261068 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.875267982 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.875298977 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.875330925 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.876137018 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.876180887 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.876209021 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.876221895 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.876252890 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.876269102 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.877938032 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.877980947 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.878004074 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.878010988 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.878043890 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.905451059 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.905468941 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.905483007 CET	49751	443	192.168.2.4	4.175.87.197
Nov 20, 2024 03:18:16.905489922 CET	443	49751	4.175.87.197	192.168.2.4
Nov 20, 2024 03:18:16.962404966 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.962460995 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.962522030 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.962542057 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.962559938 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.962589025 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.963264942 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.963305950 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.963416100 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.963423014 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.963466883 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.963466883 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.963964939 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964026928 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964041948 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.964049101 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964102030 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.964560986 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964600086 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964629889 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.964636087 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.964649916 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.964677095 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.965557098 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.965599060 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.965630054 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.965636015 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.965653896 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.965682030 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.966336012 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.966375113 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.966406107 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.966412067 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.966438055 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.966449022 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.966603994 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.966711998 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:16.966768026 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.967392921 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:16.967406988 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.021686077 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.021722078 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.021789074 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.022849083 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.022878885 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.022938967 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.025852919 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.025863886 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.025923014 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.026586056 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.026644945 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.026734114 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.026926041 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.026945114 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.027015924 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027029037 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.027280092 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027293921 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.027348995 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027426958 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.027471066 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027479887 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.027489901 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027626991 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.027648926 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.665992975 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.666574955 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.666630983 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.667198896 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.667207003 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.670298100 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.670703888 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.670742035 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.671120882 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.671129942 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.691504002 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.691844940 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.691855907 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.692403078 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.692409992 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.702776909 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.703124046 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.703145981 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.703494072 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.703500986 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901212931 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901267052 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901360035 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901406050 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901426077 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901468039 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901489973 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901511908 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901525021 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901531935 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901664972 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901686907 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.901698112 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.901702881 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.904351950 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.904381037 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.904510975 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.904825926 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.904839039 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.905095100 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.905128956 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.905215979 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.905442953 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.905462027 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.906919956 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.907279015 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.907289982 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.907684088 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.907690048 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.995780945 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.995805025 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.995951891 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.995965958 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.996001005 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.996035099 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.996064901 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.996156931 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.996157885 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.996174097 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.996184111 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.999732018 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:17.999761105 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:17.999895096 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.000123024 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.000138998 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.006767988 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.006783962 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.006834984 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.006849051 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.006880999 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.007067919 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.007082939 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.007096052 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.007102966 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.009480000 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.009573936 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.009666920 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.009825945 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.009856939 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125153065 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125211954 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125278950 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.125303984 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125365973 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125392914 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.125431061 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.125543118 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.125559092 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.125567913 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.125574112 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.128223896 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.128254890 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.128509045 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.128685951 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.128700018 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.548063993 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.548837900 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.548878908 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.549453974 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.549462080 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.562206030 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.562720060 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.562742949 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.563241959 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.563249111 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.636749983 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.638251066 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.638283014 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.638886929 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.638894081 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.645194054 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.646770000 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.646918058 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.649537086 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.662691116 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.662838936 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.665518999 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.665893078 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.665900946 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.669615030 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.669672966 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.669795036 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.669831038 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.669846058 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.669855118 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.670097113 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.670110941 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.672501087 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672557116 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.672665119 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672698021 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672769070 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.672827959 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672846079 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.672858000 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672911882 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.672930002 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.737210035 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.737277031 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.737337112 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.737514019 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.737530947 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.737560034 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.737569094 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.740669966 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.740710020 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.740808010 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.740989923 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.741007090 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.770113945 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.770165920 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.770291090 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.770522118 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.770546913 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.770631075 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.770648003 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.772844076 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.772877932 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.772980928 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.773176908 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.773205996 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.775646925 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.776067019 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.776077986 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.776511908 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.776518106 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.876925945 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.877079964 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.877155066 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.877379894 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.877389908 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.877437115 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.877443075 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.881109953 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.881158113 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:18.881266117 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.881475925 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:18.881493092 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.326236963 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.329113960 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.329140902 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.329628944 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.329641104 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.344481945 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.345002890 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.345107079 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.345288038 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.345304012 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.425393105 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.425451994 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.425550938 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.425784111 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.425825119 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.425854921 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.425870895 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.426260948 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.426737070 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.426781893 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.427222013 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.427228928 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.428934097 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.428953886 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.429034948 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.429156065 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.429162025 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.434218884 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.434567928 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.434627056 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.434973955 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.434988022 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.447978020 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.448142052 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.448219061 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.448282957 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.448282957 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.448321104 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.448348999 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.450895071 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.450936079 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.451010942 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.451164007 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.451176882 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532094955 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532205105 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532300949 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.532454014 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532547951 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.532573938 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532587051 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.532593966 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.532974005 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.532994986 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.533507109 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.533513069 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.535707951 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.535726070 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.535799980 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.535907984 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.535913944 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.541779041 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.541846037 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.541906118 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.542017937 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.542068005 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.542098999 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.542115927 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.544452906 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.544480085 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.544568062 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.544703007 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.544717073 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.636341095 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.636492014 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.636595964 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.636748075 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.636756897 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.636769056 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.636774063 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.639776945 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.639805079 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:19.639893055 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.640057087 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:19.640067101 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.270700932 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.271573067 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.271589994 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.272026062 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.272280931 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.272288084 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.272306919 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.272320986 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.272840023 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.272846937 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.274924994 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.274946928 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.275232077 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.275238037 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.275407076 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.275418997 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.275679111 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.275682926 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.275947094 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.275953054 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.370659113 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.370752096 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.370812893 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.371290922 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.371308088 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.371325970 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.371331930 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.372529984 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.372608900 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.372652054 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.374269009 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.374413013 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.374463081 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.376176119 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.376321077 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.376379013 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.377799988 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.377808094 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.377819061 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.377823114 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.378305912 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.378314972 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.378335953 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.378340006 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.378489017 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.378494024 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.378505945 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.378509045 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.382879019 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.382908106 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.382980108 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.383080959 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.383106947 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.383157969 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384269953 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384279966 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.384341002 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384531021 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384547949 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.384705067 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384732962 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.384784937 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384785891 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384795904 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.384876966 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.384891033 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.385004997 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.385023117 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.449892998 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.450506926 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.450519085 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.450989008 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.450993061 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.550801992 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.550865889 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.550923109 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.551239967 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.551250935 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.551260948 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.551266909 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.554999113 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.555018902 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.555098057 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.555263042 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.555272102 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.948894024 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.949596882 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.949630022 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:20.950232029 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:20.950237989 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.023633957 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.024518967 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.024555922 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.025511980 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.025518894 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.030714035 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.031339884 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.031352997 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.032535076 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.032541037 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.035039902 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.035926104 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.035948038 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.036833048 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.036839008 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.048238993 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.048465967 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.048572063 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.049499989 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.049546003 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.049573898 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.049590111 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.053850889 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.053903103 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.053993940 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.054195881 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.054214954 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.125890017 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.125960112 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.126097918 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.126359940 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.126388073 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.126405001 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.126411915 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129548073 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129573107 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129640102 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129658937 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129797935 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129839897 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129849911 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129884958 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129941940 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129951000 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.129959106 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.129964113 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.132143974 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.132169962 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.132236004 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.132352114 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.132364035 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.136483908 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.136540890 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.136610031 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.136831999 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.136831999 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.136840105 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.136850119 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.138705015 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.138719082 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.138781071 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.138922930 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.138932943 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.188764095 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.189363003 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.189374924 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.189850092 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.189853907 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.296847105 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.296884060 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.297024965 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.297322989 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.297338009 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.297347069 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.297352076 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.300913095 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.300954103 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.301045895 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.301223040 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.301239014 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.733421087 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.738369942 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.738429070 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.738926888 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.738940001 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.766207933 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.766881943 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.766905069 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.767395020 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.767400026 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.778605938 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.778980970 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.778990030 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.779417992 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.779422045 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.805814981 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.806142092 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.806150913 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.806519032 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.806524038 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.841398954 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.841459036 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.841736078 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.841778040 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.841778040 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.841794968 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.841804028 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.845324993 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.845350027 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.845441103 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.845582962 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.845588923 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.866221905 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.866283894 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.866431952 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.866607904 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.866626024 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.866636992 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.866641998 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.869303942 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.869395971 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.869489908 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.869626045 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.869661093 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.878407001 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.878571033 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.878650904 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.878673077 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.878684044 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.878695011 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.878701925 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.881004095 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.881027937 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.881108046 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.881230116 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.881241083 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.910772085 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.910837889 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.910963058 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.911303043 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.911309958 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.911324024 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.911328077 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.914654016 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.914724112 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.914835930 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.914999962 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.915033102 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.934926033 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.935512066 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.935544968 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:21.936006069 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:21.936012030 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.104120016 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.104173899 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.104489088 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.104537010 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.104558945 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.104568958 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.104574919 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.107774973 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.107795954 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.107867002 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.108012915 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.108019114 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.513796091 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.514405966 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.514431000 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.514935970 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.514945030 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.532542944 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.532994986 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.533021927 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.533420086 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.533427000 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.543062925 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.543379068 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.543410063 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.543731928 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.543736935 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.587902069 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.588656902 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.588665962 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.589317083 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.589322090 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.613405943 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.613455057 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.613593102 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.613909960 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.613923073 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.613931894 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.613935947 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.617598057 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.617640972 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.617743015 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.618187904 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.618201971 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.632914066 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.632972956 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.633179903 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.633235931 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.633251905 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.633260965 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.633266926 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.635835886 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.635878086 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.635952950 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.636118889 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.636143923 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.642932892 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.643001080 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.643170118 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.643197060 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.643208027 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.643218994 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.643224001 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.645622969 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.645637989 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.645725965 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.645909071 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.645921946 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.691174984 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.691226959 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.691363096 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.691564083 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.691569090 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.691587925 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.691591024 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.694242001 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.694262981 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.694353104 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.694519997 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.694534063 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.746076107 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.746532917 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.746545076 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.747085094 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.747088909 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.848184109 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.848238945 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.848292112 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.848546982 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.848557949 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.848567009 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.848572969 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.852581978 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.852610111 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:22.852684021 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.852858067 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:22.852871895 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.192502975 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.193175077 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.193208933 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.193788052 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.193793058 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.286967039 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.287451029 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.287480116 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.287986040 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.287991047 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.294148922 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.294219971 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.294275999 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.294475079 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.294490099 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.294500113 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.294506073 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.297722101 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.297763109 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.297856092 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.298064947 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.298079967 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.315474033 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.316118956 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.316148996 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.316632032 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.316637993 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.384979963 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.385425091 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.385449886 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.386109114 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.386113882 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.391051054 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.391196012 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.391249895 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.391365051 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.391382933 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.391392946 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.391398907 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.394366980 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.394407988 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.394488096 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.394701958 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.394716978 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.421632051 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.421699047 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.421761990 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.421937943 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.421957016 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.421972990 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.421979904 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.425198078 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.425230026 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.425298929 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.425540924 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.425550938 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.498806953 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.498873949 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.498939991 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.499259949 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.499272108 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.499284983 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.499289989 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.502810001 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.502851009 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.502917051 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.503119946 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.503134012 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.515091896 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.515522957 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.515535116 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.516314030 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.516319036 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.663817883 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.663861990 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.663921118 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.664257050 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.664290905 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.664316893 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.664333105 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.667344093 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.667380095 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:23.667449951 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.667757988 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:23.667776108 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.162822962 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.163377047 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.163399935 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.163986921 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.163994074 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.167494059 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.167795897 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.167812109 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.168261051 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.168266058 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.172714949 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.173000097 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.173027039 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.173155069 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.173439980 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.173456907 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.173456907 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.173469067 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.174112082 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.174117088 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.263984919 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.264059067 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.264121056 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.264324903 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.264342070 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.264354944 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.264360905 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267612934 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267765999 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267824888 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.267832994 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.267878056 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267901897 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.267914057 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267926931 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.267931938 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.267970085 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.268213987 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.268241882 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.270678997 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.270745993 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.270847082 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.271028042 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.271061897 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.273962021 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.274171114 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.274245024 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.274290085 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.274290085 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.274316072 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.274338007 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.276746035 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.276757956 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.276787996 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.276874065 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.276889086 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.276958942 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.277007103 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.277019024 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.277111053 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.277116060 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.277129889 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.277132034 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.279762983 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.279797077 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.279905081 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.280073881 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.280095100 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.310719013 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.311125994 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.311150074 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.311706066 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.311712980 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.409979105 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.410021067 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.410073042 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.410259008 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.410279989 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.410293102 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.410299063 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.413342953 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.413364887 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.413439989 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.413573980 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.413583994 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.937278032 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.937809944 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.937833071 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.938456059 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.938467979 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.947942019 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.948227882 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.948276043 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.948685884 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.948698997 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.960052967 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.960253954 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.960541964 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.960552931 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.960639954 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.960673094 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.961069107 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.961083889 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:24.961164951 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:24.961169004 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.035964966 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.036024094 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.036147118 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.036339045 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.036355972 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.036369085 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.036375999 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.039300919 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.039343119 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.039426088 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.039551973 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.039561033 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.048527956 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.048599958 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.048656940 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.048727989 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.048739910 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.048754930 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.048760891 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.050987005 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.051019907 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.051096916 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.051206112 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.051214933 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.062155962 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.062222958 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.062272072 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.062340975 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.062359095 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.062370062 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.062375069 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064338923 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064404964 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064430952 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064441919 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064455986 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064474106 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064491987 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064616919 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064627886 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064640999 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064646006 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064656973 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064666033 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.064929962 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.064938068 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.065479040 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.065483093 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.066643000 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.066651106 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.066716909 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.066838026 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.066844940 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.171025038 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.171082020 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.171129942 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.171269894 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.171281099 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.171291113 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.171295881 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.173804045 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.173823118 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.173891068 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.174007893 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.174019098 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.672888041 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.673402071 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.673427105 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.673881054 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.673886061 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.688406944 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.688703060 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.688723087 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.689002991 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.689009905 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.729691982 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.730041981 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.730053902 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.730391979 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.730397940 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.730659008 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.730900049 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.730910063 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.731190920 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.731197119 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.774652004 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.774689913 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.774893999 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.775120974 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.775120974 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.775134087 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.775141001 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.777652025 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.777690887 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.777852058 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.777901888 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.777909994 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.787893057 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.788038015 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.788127899 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.788180113 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.788180113 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.788201094 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.788213968 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.789949894 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.789993048 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.790057898 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.790162086 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.790177107 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.808229923 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.808514118 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.808521986 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.808868885 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.808873892 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.833077908 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.833183050 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.833245993 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.833312035 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.833317995 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.833327055 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.833333969 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.835304976 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.835333109 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.835412979 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.835539103 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.835552931 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.839265108 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.839344978 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.839399099 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.839474916 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.839483976 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.839494944 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.839502096 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.841267109 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.841290951 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.841370106 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.841485023 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.841500998 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.910531998 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.910587072 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.910636902 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.910792112 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.910792112 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.910806894 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.910819054 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.912950039 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.912975073 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:25.913047075 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.913166046 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:25.913178921 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.434288979 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.434793949 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.434811115 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.435225010 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.435230970 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.442409039 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.442722082 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.442744017 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.443119049 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.443126917 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.481590033 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.481899023 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.481919050 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.482251883 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.482261896 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.483637094 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.483941078 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.483966112 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.484381914 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.484386921 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.534118891 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.534262896 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.534308910 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.534521103 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.534545898 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.534564972 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.534573078 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.538837910 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.538872957 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.538940907 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.539114952 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.539129019 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.561218023 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.561592102 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.561609030 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.562071085 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.562077045 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.577816963 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.577881098 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.577935934 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.578111887 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.578135967 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.578154087 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.578161001 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.581383944 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.581408978 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.581476927 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.581634998 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.581645966 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582089901 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582170963 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582222939 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582339048 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582345009 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582356930 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582360983 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582458019 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582520008 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582576036 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582668066 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582689047 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.582704067 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.582710981 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.585257053 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.585297108 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.585366011 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.585524082 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.585546970 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.585611105 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.585700989 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.585803032 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.585974932 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.586011887 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.664580107 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.664657116 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.664715052 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.664988995 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.665024996 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.665054083 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.665070057 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.667876959 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.667915106 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:26.668011904 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.668245077 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:26.668256998 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.213906050 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.214525938 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.214559078 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.215069056 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.215076923 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.227546930 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.227741957 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.228123903 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.228172064 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.228621960 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.228651047 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.229278088 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.229353905 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.229613066 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.229629040 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.252180099 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.252686977 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.252712965 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.253115892 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.253120899 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.299493074 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.299902916 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.299923897 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.300271034 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.300278902 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.316838026 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.316981077 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.317158937 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.317404032 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.317404032 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.317423105 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.317435980 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.320655107 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.320717096 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.320924044 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.320990086 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.321002960 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.327845097 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.327995062 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.328166008 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.328166008 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.328166962 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.329468966 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.329520941 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.329694986 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.329745054 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.329745054 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.329782009 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.329806089 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.330163956 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.330250978 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.330332994 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.330427885 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.330447912 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.331739902 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.331758976 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.331830025 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.331938982 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.331952095 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.399380922 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.399455070 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.399504900 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.399621010 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.399632931 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.399652004 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.399658918 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.402048111 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.402086020 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.402157068 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.402277946 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.402307987 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.404305935 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.404478073 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.404546976 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.404619932 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.404619932 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.404653072 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.404678106 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.406600952 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.406632900 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.406707048 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.406837940 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.406848907 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.631177902 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.631208897 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.967211008 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.968100071 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.968130112 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.968539000 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.968544960 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.988326073 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.988713026 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.988775015 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.989049911 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:27.989063978 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:27.999738932 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.000008106 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.000066042 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.000330925 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.000344038 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.069845915 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.069886923 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.069989920 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.070245981 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.070245981 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.070261002 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.070282936 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.073380947 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.073426008 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.073622942 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.073653936 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.073662043 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.075757980 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.076031923 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.076070070 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.076369047 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.076379061 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.088743925 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.089014053 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.089021921 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.089302063 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.089307070 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.098273039 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.098434925 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.098526955 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.099052906 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.099052906 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.099109888 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.099134922 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.100781918 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.100816965 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.100891113 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.101006985 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.101015091 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.102888107 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.103039980 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.103110075 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.103157043 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.103157043 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.103187084 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.103210926 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.104921103 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.104964018 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.105035067 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.105140924 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.105151892 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.181559086 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.181668043 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.181768894 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.181880951 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.181914091 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.181938887 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.181953907 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.184899092 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.184990883 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.185101032 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.185205936 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.185225010 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.193902969 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.194027901 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.194093943 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.194129944 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.194142103 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.194173098 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.194178104 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.195744038 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.195776939 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.195858955 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.195960045 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.195969105 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.241816044 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:28.241863012 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.241982937 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:28.242248058 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:28.242278099 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.737238884 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.737982988 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.738001108 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.738661051 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.738667011 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.743089914 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.743402004 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.743427992 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.743885994 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.743892908 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.794171095 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.794606924 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.794639111 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.795142889 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.795150042 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.824944019 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.825478077 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.825489998 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.825978994 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.825983047 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.833919048 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.834220886 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.834253073 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.834705114 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.834712029 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.838016033 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.838074923 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.838150024 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.838332891 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.838347912 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.838362932 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.838370085 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.841758013 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.841784000 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.842026949 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.842026949 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.842062950 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.846533060 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.846585989 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.846643925 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.846751928 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.846772909 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.846786976 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.846792936 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.849174976 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.849215031 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.849422932 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.849422932 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.849457979 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.900144100 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.900593042 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:28.900605917 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.901053905 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.901586056 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:28.901604891 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.901669025 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:28.901761055 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.901833057 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.901887894 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.901905060 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.901921034 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.901926994 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.904125929 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.904165983 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.904319048 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.904350042 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.904357910 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.928333044 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.928483963 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.928579092 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.928703070 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.928703070 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.928716898 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.928728104 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.931595087 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.931690931 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.931797028 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.931972027 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.931991100 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.937500954 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.937586069 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.937684059 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.937733889 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.937753916 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.937769890 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.937777042 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.940283060 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.940298080 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.940393925 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.940532923 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:28.940547943 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:28.943464994 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:29.509947062 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.510617018 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.510654926 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.511358976 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.511365891 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.514230967 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.514617920 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.514636993 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.515144110 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.515151024 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.548530102 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.548991919 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.549025059 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.549408913 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.549417973 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.576729059 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.577060938 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.577119112 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.577620983 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.577635050 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.593657970 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.594145060 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.594208956 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.594584942 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.594638109 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.614897966 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.615164995 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.615238905 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.615293980 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.615348101 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.615381002 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.615395069 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.618988991 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.619056940 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.621457100 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.621697903 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.621731043 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623590946 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623640060 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623697042 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.623733044 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623775005 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623826981 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.623902082 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.623902082 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.623919010 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.623930931 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.626636028 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.626727104 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.626821995 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.626957893 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.626993895 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.676661015 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.676716089 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.676779032 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.676812887 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.676853895 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.676908970 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.677099943 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.677099943 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.677129984 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.677150965 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.680622101 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.680668116 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.680738926 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.680953979 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.680959940 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.697426081 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.697494030 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.697649956 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.697685003 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.697757006 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.697757006 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.697803020 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.697839975 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.700218916 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.700246096 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.700297117 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.700438976 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.700453997 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.701649904 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.701817036 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.702017069 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.702017069 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.702017069 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.704210043 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.704222918 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:29.704282999 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.704433918 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:29.704437971 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.005868912 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.005934000 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.260962963 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.261765003 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.261812925 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.262442112 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.262454033 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.262727976 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.263056040 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.263124943 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.263536930 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.263550997 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.321880102 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.322300911 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.322323084 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.322751045 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.322756052 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.348118067 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.348596096 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.348606110 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.349185944 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.349189997 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.362107038 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.362133026 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.362171888 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.362323999 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.362637043 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.362675905 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.362701893 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.362716913 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.366282940 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.366328001 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.366436958 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.366595984 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.366611004 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.375520945 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.375921965 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.376017094 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.376080036 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.376080036 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.376120090 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.376144886 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.378581047 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.378629923 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.378710985 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.378839016 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.378848076 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.386367083 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.386735916 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.386771917 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.387281895 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.387294054 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.438759089 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.439018011 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.439095020 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.439153910 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.439153910 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.439171076 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.439179897 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.441514015 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.441546917 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.441616058 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.441797018 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.441817999 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.448455095 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.448617935 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.448682070 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.448753119 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.448760033 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.448776007 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.448782921 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.451077938 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.451118946 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.451184988 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.451311111 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.451333046 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.524589062 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.524960041 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.525033951 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.525082111 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.525111914 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.525135040 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.525149107 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.527471066 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.527492046 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:30.527545929 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.527688980 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:30.527702093 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.012965918 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.015671968 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.015708923 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.016092062 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.016103983 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.024722099 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.025134087 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.025166988 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.025722980 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.025732040 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.100245953 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.100713015 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.100750923 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.101284027 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.101294994 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.103734016 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.104007959 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.104029894 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.104485035 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.104492903 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.114379883 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.115905046 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.115982056 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.116043091 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.116043091 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.116070986 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.116094112 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.119029999 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.119071007 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.119157076 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.119286060 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.119302988 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.123295069 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.123503923 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.123578072 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.123627901 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.123647928 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.123686075 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.123693943 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.125736952 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.125768900 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.125838041 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.125936031 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.125945091 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.191159010 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.191572905 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.191601038 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.192102909 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.192106962 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.199533939 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.200026989 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.200114965 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.200190067 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.200190067 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.200232983 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.200265884 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.202404022 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.202445030 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.202517986 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.202631950 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.202642918 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.203805923 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.204001904 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.204061031 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.204106092 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.204119921 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.204154968 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.204160929 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.206394911 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.206466913 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.206556082 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.206660986 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.206681967 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.289649963 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.289815903 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.289911032 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.289941072 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.289941072 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.289956093 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.289967060 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.291968107 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.291996002 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.292059898 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.292157888 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.292176962 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.765458107 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.766113997 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.766158104 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.766695023 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.766712904 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.774497032 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.775002003 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.775017977 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.775444984 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.775450945 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.855257034 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.855802059 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.855845928 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.856228113 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.856240988 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.867285013 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.867341042 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.867489100 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.867732048 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.867763042 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.867825031 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.867840052 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.870966911 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.871026039 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.871128082 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.871332884 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.871368885 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.874895096 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.875298023 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.875330925 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.875819921 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.875832081 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.876374960 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.876508951 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.876575947 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.876630068 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.876641989 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.876653910 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.876661062 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.879349947 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.879380941 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.879468918 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.879627943 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.879642963 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.957487106 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.957616091 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.957725048 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.957789898 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.957912922 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.958223104 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.958264112 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.958290100 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.958306074 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.960963964 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.961046934 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.961142063 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.961328983 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.961358070 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.963882923 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.964271069 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.964288950 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.964781046 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.964792967 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.978077888 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.978431940 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.978516102 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.978590965 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.978591919 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.978631020 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.978655100 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.981129885 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.981163979 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:31.981251955 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.981430054 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:31.981446028 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181194067 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181267023 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181353092 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.181387901 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181411028 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181492090 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.181675911 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.181694031 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.181706905 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.181714058 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.184964895 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.185034037 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.185146093 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.185327053 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.185353994 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.506771088 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.507523060 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.507586002 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.508234024 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.508249044 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.561609983 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.562048912 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.562067032 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.562787056 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.562794924 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.600976944 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.601430893 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.601485968 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.602189064 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.602202892 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.605987072 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.606477022 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.606543064 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.606636047 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.606674910 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.606704950 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.606719971 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.610143900 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.610212088 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.610291958 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.610641003 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.610671043 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.637429953 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.637897015 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.637928009 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.638550043 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.638569117 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.678105116 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.678980112 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.679049969 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.679167986 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.679188013 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.679202080 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.679208994 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.682315111 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.682354927 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.682431936 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.682742119 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.682770967 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.699068069 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.699218035 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.699290991 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.699378967 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.699378967 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.699417114 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.699456930 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.702096939 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.702156067 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.702239037 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.702452898 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.702483892 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.758610010 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.759694099 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.759743929 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.759769917 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.759829998 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.759872913 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.759901047 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.759917974 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.759928942 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.763242006 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.763294935 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.763397932 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.763544083 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.763567924 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.764405012 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.764867067 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.764929056 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.765427113 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.765439987 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.871468067 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.871990919 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.872075081 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.872138977 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.872173071 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.872200012 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.872214079 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.875035048 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.875072956 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:32.875152111 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.875345945 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:32.875363111 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.272967100 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.273806095 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.273828030 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.274405956 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.274413109 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.353549957 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.354733944 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.354774952 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.355144978 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.355154037 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.378209114 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.378400087 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.378492117 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.378700018 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.378721952 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.378737926 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.378743887 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.381941080 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.381978989 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.382078886 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.382224083 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.382239103 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.384885073 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.385339975 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.385381937 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.385855913 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.385868073 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.412492990 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.413047075 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.413060904 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.413629055 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.413635015 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.457283020 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.457509995 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.457573891 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.457626104 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.457637072 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.457653999 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.457659960 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.461080074 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.461163998 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.461256981 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.461483002 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.461517096 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.511630058 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.511818886 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.511881113 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.511951923 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.511960030 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.511972904 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.511977911 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.514961004 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.514981985 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.515054941 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.515244007 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.515256882 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.557315111 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.557866096 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.557943106 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.558432102 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.558446884 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.581636906 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.581707954 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.581774950 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.581799030 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.581836939 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.581893921 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.581940889 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.581975937 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.582001925 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.582016945 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.584786892 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.584866047 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.584958076 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.585128069 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.585156918 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.661637068 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.661840916 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.661930084 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.661941051 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.662015915 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.662081003 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.662102938 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.662127018 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.662137032 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.664761066 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.664840937 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:33.664940119 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.665119886 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:33.665155888 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.026701927 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.027309895 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.027360916 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.027903080 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.027914047 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.119688034 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.120369911 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.120424032 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.120963097 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.120982885 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.126324892 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.126388073 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.126450062 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.126641989 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.126663923 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.126684904 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.126693010 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.129923105 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.129952908 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.130050898 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.130223989 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.130237103 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.154222012 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.154692888 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.154711962 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.155246973 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.155252934 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.225509882 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.226041079 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.226084948 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.226538897 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.226551056 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.229960918 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.230290890 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.230371952 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.230467081 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.230467081 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.230500937 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.230525017 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.233283997 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.233375072 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.233479023 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.233622074 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.233678102 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.254396915 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.254570007 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.254657030 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.254822969 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.254833937 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.254848003 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.254853964 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.257565022 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.257596016 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.257679939 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.257879972 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.257896900 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.328866959 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.329065084 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.329183102 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.329180002 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.329262018 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.329412937 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.329461098 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.329489946 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.329507113 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.332746983 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.332803011 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.332809925 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.332912922 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.333086014 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.333102942 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.333429098 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.333481073 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.334045887 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.334059954 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.436342001 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.436808109 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.436893940 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.436960936 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.436960936 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.437000036 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.437026024 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.441699028 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.441781044 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.441884995 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.442224979 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.442261934 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.766346931 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.767096996 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.767121077 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.767560959 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.767566919 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.790708065 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.791063070 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.791124105 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.791465044 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.791480064 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.865962982 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.866048098 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.866203070 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.866303921 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.866321087 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.866332054 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.866338015 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.869618893 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.869664907 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.869750977 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.869908094 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.869915962 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.891021013 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.891187906 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.891280890 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.891447067 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.891447067 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.891484976 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.891506910 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.893541098 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.893632889 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.893726110 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.893851995 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.893882036 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.919243097 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.919728041 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.919739008 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.920079947 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.920085907 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.993307114 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.994157076 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.994179964 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:34.994600058 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:34.994606018 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.022432089 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.022846937 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.022887945 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.023030043 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.023030043 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.023075104 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.023075104 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.023094893 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.023104906 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.026082993 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.026104927 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.026288033 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.026356936 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.026396036 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.107053041 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.107667923 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.107681990 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.108066082 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.108072042 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.210290909 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.213260889 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.213517904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.213517904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.213517904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.216607094 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.216696024 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.216787100 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.216967106 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.217015982 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.397274971 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.398075104 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.398180962 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.398336887 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.398336887 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.398351908 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.398361921 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.401166916 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.401218891 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.401411057 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.401485920 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.401492119 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.512826920 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.513375998 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.513398886 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.513892889 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.513899088 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.514152050 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.514190912 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.564867973 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.565448046 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.565469027 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.565921068 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.565932035 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.613971949 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.614074945 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.614137888 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.614352942 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.614378929 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.614403963 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.614418983 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.617716074 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.617803097 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.618187904 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.619586945 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.619637012 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.667943954 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.668015957 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.668077946 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.668111086 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.668144941 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.668193102 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.668314934 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.668356895 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.668387890 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.668404102 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.671577930 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.671624899 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.671715975 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.671864033 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.671892881 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.703659058 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.704088926 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.704121113 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.704653978 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.704659939 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.809237003 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.809526920 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.809586048 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.809622049 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.809639931 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.809650898 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.809659004 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.812560081 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.812627077 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.812705040 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.812999964 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.813033104 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.855479002 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.856009960 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.856038094 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.856697083 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.856709003 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.988938093 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.989105940 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.989187956 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.989439964 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.989500046 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.989535093 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.989550114 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.993457079 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.993535042 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:35.993618011 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.993782997 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:35.993803978 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.054810047 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.055285931 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.055316925 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.055799007 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.055805922 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.157502890 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.157656908 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.157756090 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.157890081 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.157907009 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.157922029 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.157927990 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.161164999 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.161218882 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.161319017 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.161483049 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.161499023 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.251285076 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.252089024 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.252156019 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.252614975 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.252629995 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.337028027 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.337749004 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.337804079 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.338253021 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.338267088 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.373697042 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.374475002 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.374510050 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.374552965 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.374607086 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.374651909 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.374685049 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.374708891 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.374722958 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.377789021 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.377851963 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.377960920 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.378117085 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.378129005 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.441545963 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.441709042 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.441803932 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.441910982 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.441943884 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.441970110 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.441986084 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.445085049 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.445131063 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.445207119 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.445369959 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.445396900 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.453943968 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.454408884 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.454454899 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.454890966 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.454902887 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553410053 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553585052 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553646088 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.553658009 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553713083 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553785086 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.553873062 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.553873062 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.553884983 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.553894997 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.557919025 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.557981968 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.558087111 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.558260918 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.558276892 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.673249006 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.673964977 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.674005032 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.674489021 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.674501896 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.916795969 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.917221069 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.917320967 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.917407036 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.917407036 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.917450905 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.917475939 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.920711040 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.920794010 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.920948982 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.921057940 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.921082020 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.923118114 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.923563957 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.923599958 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:36.924042940 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:36.924055099 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.021764040 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.021987915 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.022099972 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.022162914 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.022310972 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.022310972 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.022310972 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.025273085 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.025366068 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.025474072 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.025614023 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.025640011 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.108777046 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.109204054 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.109225035 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.109637976 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.109643936 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.240607977 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.240674973 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.240782022 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.240792036 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.241173983 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.241197109 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.241214991 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.241223097 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.241230965 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.241235971 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.244669914 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.244693041 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.244786978 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.244966984 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.244977951 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.250761032 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.251207113 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.251250029 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.251673937 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.251681089 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.257189035 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.257452965 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.257469893 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.257791042 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.257796049 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.334377050 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.334405899 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.362823963 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.363065958 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.363188028 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.363188028 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.363249063 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.363272905 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.366333961 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.366383076 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.366502047 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.366671085 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.366699934 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.509581089 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.510109901 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.510170937 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.510234118 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.510234118 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.510267973 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.510293961 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.512761116 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.512780905 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.512844086 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.513027906 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.513032913 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.573003054 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.573508024 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.573532104 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.573996067 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.574002981 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.678278923 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.678483963 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.678595066 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.678669930 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.678730965 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.678777933 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.678793907 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.678805113 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.678811073 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.680685043 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.681785107 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.681838989 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.682246923 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.682250977 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.682264090 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.682292938 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.682358027 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.682490110 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.682503939 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.789419889 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.789581060 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.789674997 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.789757013 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.789793015 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.789819002 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.789834023 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.792817116 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.792851925 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.792942047 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.793095112 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.793103933 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.914057016 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.914758921 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.914771080 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:37.915302992 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:37.915308952 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.004329920 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.005220890 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.005259991 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.005774021 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.005784988 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.016377926 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.016563892 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.016657114 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.016707897 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.016722918 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.016732931 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.016737938 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.019860029 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.019906044 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.019985914 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.020112991 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.020124912 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.104957104 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.105276108 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.105376005 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.105416059 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.105416059 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.105453968 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.105478048 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.107955933 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.107995033 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.108078003 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.108222961 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.108233929 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.143603086 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.144036055 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.144046068 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.144474983 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.144481897 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.241796017 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.241987944 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.242043972 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.242075920 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.242149115 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.244477034 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.244484901 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.244494915 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.244498968 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.252074003 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.252167940 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.252358913 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.252547026 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.252582073 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.352468967 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.353179932 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.353214025 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.353688955 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.353694916 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.454859972 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.455066919 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.455126047 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.455295086 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.455307007 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.455329895 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.455334902 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.461113930 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.461148977 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.461220026 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.461947918 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.461963892 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.462234974 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.463023901 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.463059902 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.463474989 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.463483095 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.563997030 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.564100027 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.564178944 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.564209938 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.564254045 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.564307928 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.564497948 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.564517021 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.564528942 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.564536095 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.568825960 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.568882942 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.568965912 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.569094896 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.569125891 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.665172100 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.665666103 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.665703058 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.666126966 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.666136026 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.756462097 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.756875038 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.756941080 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.757258892 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.757272005 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.766417980 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.766606092 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.766664028 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.766697884 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.766716957 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.766726971 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.766732931 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.769375086 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.769473076 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.769571066 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.769701958 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.769745111 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.816260099 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:38.816334009 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:38.816456079 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:38.862132072 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.862463951 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.862562895 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.862632990 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.862632990 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.862672091 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.862696886 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.864619017 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.864682913 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.864778042 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.864888906 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.864917040 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.894090891 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.894457102 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.894509077 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.894826889 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.894845963 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.991673946 CET	49829	443	192.168.2.4	216.58.206.68
Nov 20, 2024 03:18:38.991710901 CET	443	49829	216.58.206.68	192.168.2.4
Nov 20, 2024 03:18:38.996505022 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.996896982 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.996984959 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.996984959 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.997045040 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.997076035 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.999152899 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.999227047 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:38.999335051 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.999448061 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:38.999466896 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.137419939 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.137833118 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.137923956 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.138196945 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.138211966 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.216084957 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.216597080 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.216639042 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.216905117 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.216917038 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.240457058 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.240526915 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.240627050 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.240736008 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.240736961 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.240835905 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.240835905 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.240876913 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.240904093 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.242909908 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.242999077 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.243093014 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.243208885 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.243230104 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.315531015 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.315687895 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.315778017 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.315841913 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.315841913 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.315869093 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.315890074 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.318088055 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.318161011 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.318255901 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.318406105 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.318427086 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.424828053 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.425190926 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.425219059 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.425595045 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.425606966 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.518070936 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.518393040 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.518429041 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.518743992 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.518759012 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.530093908 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.530298948 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.530333996 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.530354023 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.530386925 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.530617952 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.530651093 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.530675888 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.530690908 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.532785892 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.532836914 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.532907963 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.533035040 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.533065081 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.619332075 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.619755030 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.619822025 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.619883060 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.619883060 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.619914055 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.619937897 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.622184992 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.622215986 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.622281075 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.622427940 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.622441053 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.646055937 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.646462917 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.646486044 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.646842957 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.646850109 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.750572920 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.750787020 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.750845909 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.750905991 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.750905991 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.750946045 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.750973940 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.752933025 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.752979994 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.753050089 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.753222942 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.753251076 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.923130989 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.923521042 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.923608065 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.923914909 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.923929930 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.972430944 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.972863913 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.972923994 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:39.973155975 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:39.973170042 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.031930923 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.032109022 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.032174110 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.032263041 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.032263041 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.032308102 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.032336950 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.034388065 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.034413099 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.034476042 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.034651041 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.034662008 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.072956085 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.073103905 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.073168039 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.073247910 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.073247910 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.073281050 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.073307037 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.075409889 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.075454950 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.075525999 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.075623035 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.075639963 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.197213888 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.197541952 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.197585106 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.197864056 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.197880983 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.289655924 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.290178061 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.290189981 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.290529013 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.290533066 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.300446987 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.300731897 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.300806046 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.300853968 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.300853968 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.300884962 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.300905943 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.302755117 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.302833080 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:40.302915096 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.303029060 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:40.303050995 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.409743071 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.409899950 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.410002947 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.410047054 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.410069942 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.410080910 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.410085917 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.411099911 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.412270069 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.412334919 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.412849903 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.412863970 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.413414955 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.413471937 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.413542032 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.413666010 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.413682938 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.516870975 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.517059088 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.517134905 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.517198086 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.517198086 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.517234087 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.517261028 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.519428968 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.519520044 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.519716024 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.519835949 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.519867897 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.602617979 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.603204012 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.603221893 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.603600979 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.603605986 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.607834101 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.608511925 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.608567953 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.608899117 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.608911037 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.612016916 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.612440109 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.612528086 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.612683058 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.612699986 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.699937105 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.700851917 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.700896025 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.700911999 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.701077938 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.701077938 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.701077938 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.702935934 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.702965021 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.703026056 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.703135014 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.703145981 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.707072020 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.707643986 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.707709074 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.707753897 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.707753897 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.707782030 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.707808971 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.709897995 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.709985018 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.710081100 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.710211039 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.710241079 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.726370096 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.726541042 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.726814032 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.726814032 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.726814032 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.728887081 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.728897095 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:41.728970051 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.729100943 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:41.729110956 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.005614042 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.005633116 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.036983013 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.037050962 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.052468061 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.052928925 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.052972078 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.053308010 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.053322077 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.151979923 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.152334929 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.152400970 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.152481079 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.152517080 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.152545929 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.152559996 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.156002045 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.156092882 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.156167984 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.156563997 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.156599045 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.172561884 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.172890902 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.172930956 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.173351049 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.173362970 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274039984 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274058104 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274240971 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.274303913 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274363995 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274416924 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.274785995 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.274821997 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.274848938 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.274863958 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.277379036 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.277523994 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.277559042 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.277607918 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.278084040 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.278094053 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.278692961 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.278697968 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.279321909 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.279341936 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.365418911 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.365709066 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.365717888 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.366096020 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.366099119 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.384948969 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.385253906 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.385301113 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.385618925 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.385632038 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.387593985 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.387936115 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.387984991 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.388005018 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.388017893 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.388035059 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.388040066 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.390304089 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.390330076 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.390381098 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.394602060 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.394612074 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.569993973 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.570036888 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.570077896 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.570137978 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.570168018 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.570898056 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.570920944 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.570934057 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.570940971 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.574548960 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.574589968 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.574659109 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.574800968 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.574827909 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.678881884 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.678983927 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.679061890 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.679090977 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.679155111 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.679269075 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.679306984 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.679353952 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.679369926 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.682617903 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.682657957 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.682727098 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.682867050 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.682882071 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.796963930 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.797708035 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.797739983 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.798186064 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.798192024 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905072927 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905379057 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905462027 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.905529976 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905580044 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905637026 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.905689955 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905720949 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.905720949 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.905746937 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.905766964 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.908725023 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.908814907 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:42.908910990 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.909063101 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:42.909100056 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.036262989 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.037147999 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.037182093 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.037693977 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.037722111 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.105839968 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.106532097 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.106571913 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.106965065 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.106971025 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.137084961 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.137110949 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.137196064 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.137207985 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.137388945 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.137557983 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.137557983 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.137558937 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.140605927 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.140701056 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.140799046 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.140913963 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.140952110 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.211127996 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.211651087 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.211716890 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.211765051 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.211782932 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.211796045 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.211802006 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.214152098 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.214236021 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.214318037 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.214477062 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.214510918 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.241314888 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.241683960 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.241703033 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.242115974 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.242121935 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.330316067 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.330677032 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.330702066 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.331099033 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.331105947 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343667984 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343756914 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343877077 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.343898058 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343921900 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.343940020 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343952894 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.343959093 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.343971014 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.343976021 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.346760988 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.346853018 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.346956015 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.347115040 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.347153902 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.429636002 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.430310011 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.430357933 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.430362940 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.430423021 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.430474997 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.430490017 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.430500031 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.430505037 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.433094978 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.433161020 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.433343887 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.433415890 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.433434963 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.443142891 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.443150043 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.578202963 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.578793049 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.578856945 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.579282999 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.579298019 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.683126926 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.683298111 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.683382034 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.683501959 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.683547974 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.683579922 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.683594942 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.686472893 CET	49921	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.686543941 CET	443	49921	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.686621904 CET	49921	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.686760902 CET	49921	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.686778069 CET	443	49921	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.790065050 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.790667057 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.790730000 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.791162968 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.791177034 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.881733894 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.882565022 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.882627964 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.882926941 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.882941008 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.934946060 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.938447952 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.938517094 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.938580990 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.938617945 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.938643932 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.938659906 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.942063093 CET	49922	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.942106962 CET	443	49922	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.942379951 CET	49922	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.942529917 CET	49922	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.942549944 CET	443	49922	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.989094973 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.989155054 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.989377975 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.989459038 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.989506960 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.989542961 CET	49918	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.989559889 CET	443	49918	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.993114948 CET	49923	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.993202925 CET	443	49923	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:43.993305922 CET	49923	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.993473053 CET	49923	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:43.993505001 CET	443	49923	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.042807102 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.043360949 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.043401957 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.044066906 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.044085026 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.077766895 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.078749895 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.078767061 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.079235077 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.079241037 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146326065 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146400928 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146471977 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.146523952 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146550894 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146620035 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.146868944 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.146898985 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.146914959 CET	49919	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.146924973 CET	443	49919	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.150392056 CET	49924	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.150418043 CET	443	49924	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.150521040 CET	49924	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.150856972 CET	49924	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.150870085 CET	443	49924	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.176841974 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.177160025 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.177318096 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.177352905 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.177371025 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.177383900 CET	49920	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.177391052 CET	443	49920	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.180052996 CET	49925	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.180150986 CET	443	49925	13.107.246.45	192.168.2.4
Nov 20, 2024 03:18:44.180329084 CET	49925	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.180531979 CET	49925	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:18:44.180567980 CET	443	49925	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:17:24.419114113 CET	53	59690	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:24.523371935 CET	53	53796	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:25.519119024 CET	53	50633	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:25.607969046 CET	49542	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:25.608143091 CET	64403	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:25.620332003 CET	53	64403	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:25.642132044 CET	53	49542	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:26.510850906 CET	52654	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:26.510994911 CET	54873	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:26.522764921 CET	53	52654	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:26.523133993 CET	53	54873	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:28.178913116 CET	62617	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:28.179222107 CET	55074	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:17:28.185667992 CET	53	62617	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:28.185765028 CET	53	55074	1.1.1.1	192.168.2.4
Nov 20, 2024 03:17:39.092300892 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 03:17:42.573719978 CET	53	55426	1.1.1.1	192.168.2.4
Nov 20, 2024 03:18:01.342292070 CET	53	54467	1.1.1.1	192.168.2.4
Nov 20, 2024 03:18:23.658040047 CET	53	61318	1.1.1.1	192.168.2.4
Nov 20, 2024 03:18:23.980926037 CET	53	55679	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 03:17:25.607969046 CET	192.168.2.4	1.1.1.1	0x6a93	Standard query (0)	prettylearning.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:25.608143091 CET	192.168.2.4	1.1.1.1	0x7b48	Standard query (0)	prettylearning.com	65	IN (0x0001)	false
Nov 20, 2024 03:17:26.510850906 CET	192.168.2.4	1.1.1.1	0x8435	Standard query (0)	prettylearning.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:26.510994911 CET	192.168.2.4	1.1.1.1	0xb4fa	Standard query (0)	prettylearning.com	65	IN (0x0001)	false
Nov 20, 2024 03:17:28.178913116 CET	192.168.2.4	1.1.1.1	0xc943	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:28.179222107 CET	192.168.2.4	1.1.1.1	0x7e5c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 03:17:25.642132044 CET	1.1.1.1	192.168.2.4	0x6a93	No error (0)	prettylearning.com	104.18.25.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:25.642132044 CET	1.1.1.1	192.168.2.4	0x6a93	No error (0)	prettylearning.com	104.18.24.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:26.522764921 CET	1.1.1.1	192.168.2.4	0x8435	No error (0)	prettylearning.com	104.18.24.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:26.522764921 CET	1.1.1.1	192.168.2.4	0x8435	No error (0)	prettylearning.com	104.18.25.111	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:28.185667992 CET	1.1.1.1	192.168.2.4	0xc943	No error (0)	www.google.com	216.58.206.68	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:17:28.185765028 CET	1.1.1.1	192.168.2.4	0x7e5c	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

prettylearning.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.18.25.111	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:26 UTC	720	OUT	GET /send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0' HTTP/1.1 Host: prettylearning.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:17:26 UTC	562	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 02:17:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close expires: Wed, 20 Nov 2024 03:17:26 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-content-type-options: nosniff x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8e54f192c8df8c65-EWR
2024-11-20 02:17:26 UTC	807	IN	Data Raw: 31 34 64 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 20 20 20 20 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 33 62 34 37 36 62 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 0a 20 20 20 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 Data Ascii: 14dc<!doctype html><html><head> <title>404 Not Found</title> <style> html{margin:0;padding:0;background:#fff;font-family:Arial;height:100%} body{padding:20px;color:#3b476b;line-height:18px;height:100%} h2{font-size:1.5em;margin-bottom:3
2024-11-20 02:17:26 UTC	1369	IN	Data Raw: 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 2f 3e 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 64 63 22 3e 44 65 74 61 69 6c 73 3c 2f 6c 61 62 65 6c 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 63 22 3e 48 6f 73 74 6e 61 6d 65 3a 20 66 65 6e 2d 68 6f 6f 74 68 6f 6f 74 2d 75 73 2d 65 61 73 74 31 2d 63 68 6d 63 3c 62 72 20 2f 3e 44 61 74 61 63 65 6e 74 65 72 3a 20 67 63 65 2d 75 73 2d 65 61 73 74 31 3c 2f 70 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 73 74 79 6c 65 3d 22 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 22 3e 0a 20 20 20 20 3c 70 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: e="checkbox" /> <label for="dc">Details</label> <p class="c">Hostname: fen-hoothoot-us-east1-chmc<br />Datacenter: gce-us-east1</p> </div> <section style="top:50%;transform:translateY(-50%);position:relative;"> <p><svg xmlns="http://www.w3
2024-11-20 02:17:26 UTC	1369	IN	Data Raw: 6c 38 20 32 76 36 30 61 39 33 20 39 33 20 30 20 30 20 30 2d 32 30 2d 33 63 2d 31 35 20 30 2d 32 37 20 33 2d 33 36 20 38 61 36 35 20 36 35 20 30 20 30 20 30 2d 33 32 20 34 33 6c 2d 33 20 31 39 76 31 34 30 68 2d 36 35 56 32 34 30 7a 6d 33 34 34 20 32 32 38 68 2d 32 63 2d 36 20 31 32 2d 31 37 20 32 31 2d 33 31 20 32 39 2d 31 35 20 37 2d 33 31 20 31 31 2d 35 30 20 31 31 2d 31 30 20 30 2d 32 31 2d 31 2d 33 33 2d 34 2d 31 31 2d 33 2d 32 32 2d 37 2d 33 31 2d 31 34 61 37 32 20 37 32 20 30 20 30 20 31 2d 33 34 2d 36 34 63 30 2d 31 39 20 36 2d 33 35 20 31 37 2d 34 36 20 31 31 2d 31 32 20 32 35 2d 32 31 20 34 32 2d 32 37 20 31 38 2d 36 20 33 37 2d 31 30 20 35 38 2d 31 32 6c 36 33 2d 33 76 2d 37 63 30 2d 31 36 2d 36 2d 32 38 2d 31 38 2d 33 36 73 2d 32 36 2d 31 32 2d Data Ascii: l8 2v60a93 93 0 0 0-20-3c-15 0-27 3-36 8a65 65 0 0 0-32 43l-3 19v140h-65V240zm344 228h-2c-6 12-17 21-31 29-15 7-31 11-50 11-10 0-21-1-33-4-11-3-22-7-31-14a72 72 0 0 1-34-64c0-19 6-35 17-46 11-12 25-21 42-27 18-6 37-10 58-12l63-3v-7c0-16-6-28-18-36s-26-12-
2024-11-20 02:17:26 UTC	1369	IN	Data Raw: 67 69 74 61 6c 20 4d 69 6c 6c 65 6e 6e 69 75 6d 20 43 6f 70 79 72 69 67 68 74 20 41 63 74 20 61 6e 64 20 72 65 6c 61 74 65 64 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6c 61 77 73 2c 20 65 6e 61 62 6c 69 6e 67 20 70 72 69 76 61 63 79 20 63 6f 6e 73 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 66 6f 72 20 47 44 50 52 2c 20 61 6e 64 20 73 75 70 70 6f 72 74 69 6e 67 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 61 6e 64 20 64 6f 6e 61 74 69 6f 6e 73 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 70 3e 54 68 69 73 20 73 65 72 76 69 63 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 62 61 73 69 73 20 77 69 74 68 6f 75 74 20 77 61 72 72 61 6e 74 69 65 73 20 6f 66 20 61 6e 79 20 6b 69 6e 64 2e 3c Data Ascii: gital Millennium Copyright Act and related international copyright laws, enabling privacy consent, including for GDPR, and supporting subscriptions and donations.</p> <p>This service is provided on an "AS IS" basis without warranties of any kind.<
2024-11-20 02:17:26 UTC	434	IN	Data Raw: 65 73 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 73 20 61 72 65 20 68 6f 73 74 65 64 3c 2f 62 3e 20 61 6e 64 20 61 6c 6c 20 63 6f 6e 74 65 6e 74 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 20 61 72 65 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 20 61 6e 64 20 72 6f 75 74 69 6e 65 6c 79 20 73 63 61 6e 6e 65 64 20 66 6f 72 20 61 6e 64 20 61 75 64 69 74 65 64 2e 20 54 68 65 72 65 20 61 72 65 20 6e 6f 20 69 6e 73 74 61 6c 6c 65 72 73 2c 20 73 70 79 77 61 72 65 2c 20 65 78 74 65 6e 73 69 6f 6e 73 2c 20 61 72 63 68 69 76 65 73 2c 20 6f 72 20 6f 74 68 65 72 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6d 61 6c 69 63 69 6f 75 73 20 66 69 6c 65 73 20 68 6f 73 74 65 64 20 6f 6e 20 74 68 69 73 20 64 6f 6d 61 69 6e 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: es or downloads are hosted</b> and all content endpoints and services are continuously and routinely scanned for and audited. There are no installers, spyware, extensions, archives, or other potentially malicious files hosted on this domain.</p> <
2024-11-20 02:17:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	104.18.25.111	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:26 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: prettylearning.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0' Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:17:26 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:17:26 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 198 Connection: close Cache-Control: public, max-age=3600 expires: Wed, 20 Nov 2024 03:10:28 GMT last-modified: Fri, 18 Oct 2024 13:35:55 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 418 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8e54f1944ead42f5-EWR
2024-11-20 02:17:26 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 01 00 01 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	104.18.24.111	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:27 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: prettylearning.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:17:27 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:17:27 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 198 Connection: close Cache-Control: public, max-age=3600 expires: Wed, 20 Nov 2024 03:10:28 GMT last-modified: Fri, 18 Oct 2024 13:35:55 GMT strict-transport-security: max-age=15724800; preload timing-allow-origin: * vary: Accept-Encoding x-buildname: hoothoot x-buildnumber: 1528792020 x-datacenter: gce-us-east1 x-hostname: fen-hoothoot-us-east1-chmc via: 1.1 google alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 419 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8e54f19988767c6f-EWR
2024-11-20 02:17:27 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 01 00 01 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:17:30 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=52074 Date: Wed, 20 Nov 2024 02:17:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:17:31 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=52034 Date: Wed, 20 Nov 2024 02:17:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 02:17:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:17:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Abn8zrhpvtntXfn&MD=sosKFNLB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:17:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a61797fa-8a83-403a-88da-a3e1fe9380ac MS-RequestId: 94848cdb-834a-44a6-9d24-6b7e5db929e9 MS-CV: CrAd1/vX1UKIRwqN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:17:37 GMT Connection: close Content-Length: 24490
2024-11-20 02:17:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 02:17:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:16 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Abn8zrhpvtntXfn&MD=sosKFNLB HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:18:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 12262173-3c00-4d09-812f-2c096e9600ac MS-RequestId: 49d4393b-0edc-4419-9eb8-e0e3bdf1c4d5 MS-CV: uHWPQ4yUc0mYlacK.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:18:15 GMT Connection: close Content-Length: 30005
2024-11-20 02:18:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 02:18:16 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:16 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:16 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021816Z-185f5d8b95ckwnflhC1NYCx9qs00000009p000000000dnhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:16 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 02:18:16 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:17 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:17 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021817Z-185f5d8b95cdh56ghC1NYCk1x400000003b000000000rd0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:17 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:17 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:17 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021817Z-185f5d8b95c5lcmhhC1NYCsnsw00000009s0000000001v16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:17 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:17 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:17 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021817Z-r1d97b99577dd2gchC1TEBz5ys00000007y000000000mwmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:17 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:17 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:17 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021817Z-185f5d8b95c4vwv8hC1NYCy4v400000009q000000000ktn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:17 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-r1d97b99577lxltfhC1TEByw2s00000008bg000000001e37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-r1d97b9957747b9jhC1TEBgyec00000008ag00000000azk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-185f5d8b95cjbkr4hC1NYCeu2400000009g0000000005xtb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:18 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e563634e-601e-000d-3bed-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-185f5d8b95c68cvnhC1NYCfn7s00000009g000000000sthx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:18 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-185f5d8b95csp6jmhC1NYCwy6s00000009mg000000005vrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:18 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:18 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021818Z-185f5d8b95c68cvnhC1NYCfn7s00000009kg00000000g92e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:18 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:19 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021819Z-185f5d8b95c4bhwphC1NYCs8gw00000009u0000000003dqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:19 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021819Z-r1d97b9957789nh9hC1TEBxha800000008eg0000000017d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:19 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021819Z-185f5d8b95cwtv72hC1NYC141w00000009eg00000000q9cd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:19 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021819Z-1777c6cb754g9zd5hC1TEBfvpw00000008z000000000rtac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:19 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021819Z-1777c6cb754dqf99hC1TEB5nps00000008tg00000000d4pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021820Z-185f5d8b95csd4bwhC1NYCq7dc00000009cg00000000wvqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:20 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021820Z-185f5d8b95cdh56ghC1NYCk1x400000003fg000000006r9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4a7db69e-a01e-0084-45ec-3a9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021820Z-185f5d8b95cgrrn8hC1NYCgwh400000009d000000000nts2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:20 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021820Z-r1d97b99577gg97qhC1TEBcrf4000000084000000000383q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021820Z-185f5d8b95crwqd8hC1NYCps6800000009fg00000000tak7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-185f5d8b95c68cvnhC1NYCfn7s00000009m000000000eah7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-185f5d8b95cwtv72hC1NYC141w00000009fg00000000h60h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-1777c6cb7544n7p6hC1TEByvb4000000091000000000hmc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-185f5d8b95c4bhwphC1NYCs8gw00000009pg00000000n022 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-185f5d8b95ckwnflhC1NYCx9qs00000009h000000000w7tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-185f5d8b95c96jn4hC1NYCbgp800000009n000000000a0kg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-1777c6cb7544n7p6hC1TEByvb400000008yg00000000te1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-r1d97b9957744xz5hC1TEB5bf8000000083g00000000abu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021821Z-1777c6cb7544nvmshC1TEBf7qc00000008r000000000hbnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-r1d97b99577kk29chC1TEBemmg000000089g0000000089ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:22 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-1777c6cb754g9zd5hC1TEBfvpw00000009600000000014su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:22 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-1777c6cb754wcxkwhC1TEB3c6w00000008x0000000009c9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-185f5d8b95c4vwv8hC1NYCy4v400000009tg000000005xnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-185f5d8b95c68cvnhC1NYCfn7s00000009kg00000000g98d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021822Z-185f5d8b95cdh56ghC1NYCk1x400000003dg00000000fsxf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:23 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:23 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021823Z-185f5d8b95c96jn4hC1NYCbgp800000009eg0000000108kx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:23 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:23 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021823Z-185f5d8b95c9mqtvhC1NYCghtc00000009sg0000000002ek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:23 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021823Z-185f5d8b95cp7lkfhC1NYC7rpw00000009u0000000003785 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021823Z-r1d97b99577brct2hC1TEBambg000000020g0000000018ap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:23 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b0c2e714-101e-000b-0df2-3a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021823Z-185f5d8b95c96jn4hC1NYCbgp800000009eg0000000108n0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:18:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-r1d97b99577kk29chC1TEBemmg00000008a0000000007k9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-185f5d8b95cp7lkfhC1NYC7rpw00000009u00000000037a2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-185f5d8b95cmd8vfhC1NYC0g4000000005kg000000001768 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-1777c6cb754vxwc9hC1TEBykgw0000000910000000002ef8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-185f5d8b95ckwnflhC1NYCx9qs00000009sg0000000001qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021824Z-1777c6cb754dqf99hC1TEB5nps00000008u000000000a82x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95c5lcmhhC1NYCsnsw00000009s0000000001vmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-1777c6cb7549j9hhhC1TEBzmcc00000008vg00000000d74h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95cx9g8lhC1NYCtgvc00000001z000000000athg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95crwqd8hC1NYCps6800000009p0000000004anr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95crl6swhC1NYC3ueg00000009ug00000000154f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-r1d97b99577mrt4rhC1TEBftkc0000000840000000009kz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-1777c6cb754vxwc9hC1TEBykgw0000000910000000002ehw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95c4bhwphC1NYCs8gw00000009n000000000sfxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:25 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021825Z-185f5d8b95cgrrn8hC1NYCgwh400000009gg000000005men x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021826Z-185f5d8b95cjbkr4hC1NYCeu2400000009gg0000000045fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:26 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021826Z-r1d97b99577sdxndhC1TEBec5n00000008dg000000002tnw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021826Z-185f5d8b95cdtclvhC1NYC4rmc00000009s000000000bug3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:26 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021826Z-r1d97b995777mdbwhC1TEBezag0000000870000000008dtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:26 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:26 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:26 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021826Z-r1d97b99577sdxndhC1TEBec5n00000008bg0000000089kq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:26 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021827Z-185f5d8b95c95vpshC1NYC759c00000009g000000000t1p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021827Z-r1d97b995778dpcthC1TEB4b5400000007zg00000000qned x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021827Z-r1d97b99577mrt4rhC1TEBftkc000000081000000000k5b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:27 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 8d3bd1e1-301e-000c-7cf2-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021827Z-r1d97b99577jlrkbhC1TEBq8d0000000083g00000000ar65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:18:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021827Z-1777c6cb7544n7p6hC1TEByvb4000000094g000000006qsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-185f5d8b95cdtclvhC1NYC4rmc00000009tg0000000050ey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-185f5d8b95cgrrn8hC1NYCgwh400000009bg00000000t1f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:27 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-185f5d8b95c9mqtvhC1NYCghtc00000009m000000000qb4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-185f5d8b95csp6jmhC1NYCwy6s00000009g000000000p3x6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-1777c6cb754n67brhC1TEBcp9c000000091g0000000095q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-185f5d8b95cf7qddhC1NYC66an00000009n000000000hktd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-r1d97b99577mrt4rhC1TEBftkc000000085g000000005ahx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-r1d97b9957789g82hC1TEBstx0000000086000000000a4p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-r1d97b99577lxltfhC1TEByw2s00000008b0000000002u66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021828Z-1777c6cb754wcxkwhC1TEB3c6w00000008vg00000000efku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:29 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:29 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021829Z-185f5d8b95csp6jmhC1NYCwy6s00000009gg00000000hxqc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:29 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:29 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:29 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021829Z-185f5d8b95c5lcmhhC1NYCsnsw00000009kg00000000uxfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:29 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:29 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:29 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021829Z-185f5d8b95ckwnflhC1NYCx9qs00000009hg00000000u7hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b073a805-b01e-0053-70ee-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021829Z-r1d97b99577lxltfhC1TEByw2s000000088000000000c06b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021829Z-r1d97b9957789g82hC1TEBstx0000000089g000000000g2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:30 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:30 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:30 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021830Z-1777c6cb754whff4hC1TEBcd6c00000007q0000000001rk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:30 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:30 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:30 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:30 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021830Z-185f5d8b95ctl8xlhC1NYCn94g00000009h000000000z53e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:30 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:30 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:30 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021830Z-185f5d8b95c96jn4hC1NYCbgp800000009hg00000000mhgw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:30 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021830Z-185f5d8b95crl6swhC1NYC3ueg00000009s000000000cc7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:30 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:30 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021830Z-r1d97b9957744xz5hC1TEB5bf8000000080000000000ne45 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-r1d97b9957747b9jhC1TEBgyec000000089000000000f1uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-1777c6cb7549j9hhhC1TEBzmcc00000008s000000000qkx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-r1d97b99577d6qrbhC1TEBux5s00000008cg000000005xw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-r1d97b99577lxltfhC1TEByw2s000000087g00000000c6wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-185f5d8b95crl6swhC1NYC3ueg00000009ug0000000015cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-1777c6cb754j47wfhC1TEB5wrw00000004rg00000000hbee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-185f5d8b95cf7qddhC1NYC66an00000009k000000000tc1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-185f5d8b95c96jn4hC1NYCbgp800000009m000000000d2d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:31 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021831Z-r1d97b99577656nchC1TEBk98c000000087g00000000dtwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-1777c6cb754xjpthhC1TEBexs800000008vg0000000068pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-r1d97b9957744xz5hC1TEB5bf8000000082g00000000cr9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-185f5d8b95ckwnflhC1NYCx9qs00000009ng00000000gguq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-1777c6cb7549x5qchC1TEBggbg000000094000000000061b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-r1d97b9957789nh9hC1TEBxha8000000087000000000nk14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:32 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021832Z-1777c6cb7544nvmshC1TEBf7qc00000008vg0000000023wq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:33 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021833Z-185f5d8b95crwqd8hC1NYCps6800000009f000000000uam7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021833Z-185f5d8b95csp6jmhC1NYCwy6s00000009kg00000000ar51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021833Z-1777c6cb754dqf99hC1TEB5nps00000008wg0000000029t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021833Z-1777c6cb754wcxkwhC1TEB3c6w00000008y0000000005axv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:33 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021833Z-185f5d8b95cgrrn8hC1NYCgwh400000009h00000000033ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-r1d97b99577jlrkbhC1TEBq8d000000008700000000004vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-185f5d8b95c5lcmhhC1NYCsnsw00000009hg00000000vm21 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-185f5d8b95cf7qddhC1NYC66an00000009mg00000000mf55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-1777c6cb7544nvmshC1TEBf7qc00000008pg00000000ptd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-185f5d8b95cp7lkfhC1NYC7rpw00000009sg000000008h5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-1777c6cb754whff4hC1TEBcd6c00000007gg00000000m6w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:34 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-185f5d8b95c4bhwphC1NYCs8gw00000009pg00000000n0x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021834Z-1777c6cb754xrr98hC1TEB3kag00000008t000000000cmza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:34 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-185f5d8b95cmd8vfhC1NYC0g4000000005b000000000w01r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-185f5d8b95csd4bwhC1NYCq7dc00000009fg00000000kerf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-r1d97b99577gg97qhC1TEBcrf4000000081000000000d3he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-1777c6cb7544nvmshC1TEBf7qc00000008sg00000000bq2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-1777c6cb7544nvmshC1TEBf7qc00000008t0000000009py2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:35 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021835Z-1777c6cb754j47wfhC1TEB5wrw00000004wg00000000164r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-1777c6cb754j8gqphC1TEB5bf800000008v000000000fr92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-185f5d8b95c4vwv8hC1NYCy4v400000009n000000000t69m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-r1d97b99577n5jhbhC1TEB74vn0000000890000000002cfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:36 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-r1d97b99577d6qrbhC1TEBux5s000000086g00000000rd69 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-185f5d8b95c4bhwphC1NYCs8gw00000009q000000000m9d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:36 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021836Z-1777c6cb7549x5qchC1TEBggbg00000008z000000000g2r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-185f5d8b95cjbkr4hC1NYCeu2400000009hg0000000009ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-r1d97b9957789nh9hC1TEBxha800000008cg000000005xvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-185f5d8b95c68cvnhC1NYCfn7s00000009k000000000m67r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-185f5d8b95c68cvnhC1NYCfn7s00000009n0000000008sc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-1777c6cb7544n7p6hC1TEByvb4000000092000000000ezur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:37 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:37 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021837Z-1777c6cb7544nvmshC1TEBf7qc00000008ug000000005f76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-185f5d8b95cgrrn8hC1NYCgwh400000009g0000000007w1a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-1777c6cb754j47wfhC1TEB5wrw00000004u000000000anzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-185f5d8b95cgrrn8hC1NYCgwh400000009fg000000009evc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-r1d97b99577n4dznhC1TEBc1qw000000089g000000006kz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-r1d97b99577jlrkbhC1TEBq8d0000000084000000000930x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-185f5d8b95csd4bwhC1NYCq7dc00000009kg00000000634u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:38 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:38 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e99758fe-d01e-0065-348c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021838Z-r1d97b995774zjnrhC1TEBv1ww000000083g00000000gb66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:18:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:39 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:39 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6d467d74-a01e-0050-5286-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021839Z-185f5d8b95cdh56ghC1NYCk1x400000003fg000000006s5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:39 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:39 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:39 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f2376ea7-e01e-000c-078c-3a8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021839Z-1777c6cb754wcxkwhC1TEB3c6w00000008yg0000000039cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:39 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:39 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:39 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: c1a202f8-901e-005b-118c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021839Z-r1d97b99577n4dznhC1TEBc1qw000000085000000000h8ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:39 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:18:39 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:18:39 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:18:39 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 270c322f-601e-00ab-4d8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T021839Z-1777c6cb754rz2pghC1TEBghen00000008wg000000008eyr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:18:39 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Target ID:	0
Start time:	21:17:19
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:17:22
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,11247993354994930202,17522058245129960526,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:17:25
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0' HTTP/1.1Host: prettylearning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: prettylearning.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: prettylearning.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Abn8zrhpvtntXfn&MD=sosKFNLB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Abn8zrhpvtntXfn&MD=sosKFNLB HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: prettylearning.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2640, Parent PID: 432

General

Chronological Activities

Analysis Process: chrome.exePID: 5744, Parent PID: 2640

General

Chronological Activities

Analysis Process: chrome.exePID: 6432, Parent PID: 432

General

Chronological Activities

Disassembly

Windows Analysis Report
https://prettylearning.com/send/50f007e05c8_2bc040c3c094d6b3e35eb5c657b12a2cd3f977da0'