Edit tour

Windows Analysis Report
http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13

Overview

General Information

Sample URL:	http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13
Analysis ID:	1559019
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2180,i,3917518086774542599,8825394850173494803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Address: gin_throttle_mw_360000000000_8.46.123.75X-Ratelimit-Limit: 10X-Ratelimit-Remaining: 8X-Ratelimit-Reset: 1732074464Date: Wed, 20 Nov 2024 02:47:44 GMTContent-Length: 0

Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: http://search.yahoo.com/mrss/
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2022/04/931/523/Joe-Biden-Ukr
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/01/931/523/hong-kong-pol
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/08/931/523/bibi-khamenei
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/09/931/523/zelenskyy-4.j
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/1200/675/trump-sheinb
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/all_photo_fs_
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/aptopix-biden
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/copy-of-right
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/crisis-prep-d
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/donald-trump-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/donald-trump.
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/family-mourns
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/finland-cable
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/fire-in-spani
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/georgia-abkha
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/georgia.jpg?v
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/gettyimages-2
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/india-babies.
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/little-tadpol
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/marius-borg-h
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/mohammed-afif
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/roman-road-ol
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/ukraine-soldi
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/ukraine-war.j
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/vladimir-puti
Source: chromecache_52.1.dr, chromecache_55.1.dr	String found in binary or memory: https://feeds.foxnews.com/foxnews/world
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://kyivindependent.com/zelensky-missiles-drones/"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://moxie.foxnews.com/google-publisher/world.xml
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://news.sky.com/story/marius-borg-hoiby-eldest-son-of-norways-crown-princess-mette-marit-arrest
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://pubsubhubbub.appspot.com/
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.bbc.com/news/articles/cjr4zwj2lgdo"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.cbc.ca/news/canada/nova-scotia/police-say-walmart-worker-death-not-suspicious-1.7383140&
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foreign.senate.gov/press/rep/release/risch-cotton-colleagues-introduce-legislation-to-sa
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxbusiness.com/category/walmart"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxbusiness.com/markets/usmca-trade-deal-nafta"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/columns/digging-history"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/health/healthy-living/womens-health"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/health/mental-health"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/benjamin-netanyahu"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/donald-trump"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/elon-musk"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/joe-biden"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/ted-cruz"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/person/xi-jinping"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/politics/defense/wars"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/politics/foreign-policy/nuclear-proliferation"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/politics/foreign-policy/state-department"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/science/archaeology"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/science/archaeology/ancient-rome"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/science/archaeology/dinosaurs"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/science/wild-nature/amphibians"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/topic/missing-persons"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/topic/world-war-one"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/travel/regions/south-america"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/us/crime/police-and-law-enforcement"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/us/immigration"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts/iran"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/conflicts/ukraine"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/crime"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/nato"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/personalities/vladimir-putin"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/united-nations"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/brazil"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/canada"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/china"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/europe"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/hong-kong"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/israel"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/russia"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/spain"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/category/world/world-regions/united-kingdom"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/download"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/lifestyle/irish-farmer-finds-near-60-pound-slab-ancient-bog-butter-his-land-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/media/hong-kong-journalists-convicted-sedition-china-cracks-down-free-press-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/opinion/china-expanding-influence-backyard-us-act"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/biden-authorizes-ukraine-use-us-long-range-missiles-strike-inside-r
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/biden-misses-g-20-family-photo-white-house-blames-logistical-issues
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/biden-reverses-trump-era-policies-lifts-sanctions-on-international-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/biden-xi-meet-sidelines-apec-conference-bay-area"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/biden-xi-meeting-will-be-forum-for-intense-diplomacy-amid-tensions-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/election-victory-trumps-gains-went-beyond-battlegrounds"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/elizabeth-warren-gets-sarcastic-after-trump-taps-musk-ramaswamy-dog
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/first-buddy-elon-earns-family-status-trump-world-musk-expands-polit
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/incoming-left-wing-mexican-president-could-bad-news-us-border-crisi
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/iran-informs-un-nuclear-watchdog-of-increased-uranium-production&qu
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/south-koreas-president-picking-golf-hopes-impress-trump"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/thune-adamant-about-trump-support-driving-maga-agenda-despite-tense
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/top-trump-allies-meet-netanyahu-israel-icc-seeks-arrest-warrants&qu
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/trump-allies-warn-biden-risking-world-war-iii-authorizing-long-rang
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/trump-announces-elected-25-tariff-mexico-dont-stop-influx-migrants-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/trump-team-reacts-report-president-elect-told-russias-putin-not-esc
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/u-s-revokes-international-criminal-court-prosecutors-visa-for-her-i
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/waltz-rubio-trump-national-security"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/politics/xi-jinping-trump-china-trade"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/travel/flight-attendants-viral-video-shows-pilots-landing-heavy-rainstorm&qu
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/us/identity-badly-decomposed-body-found-ohio-car-wash-released-report"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/us/iranian-asset-2-others-charged-plot-assassinate-trump-doj-says"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/us/migrant-center-leader-hopes-president-trump-doesnt-bring-back-remain-mexi
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/us/missouri-infant-dies-mother-accidentally-places-baby-oven-instead-crib-po
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/1000-days-war-ukraine-zelenskyy-doubles-down-aerial-options-atacms-dro
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/12-year-old-boy-stumbles-upon-stunning-ancient-find-while-walking-dog-
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/2000-year-old-roman-road-discovered-archaeologists-london
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/45-pro-democracy-hong-kong-activists-sentenced-up-10-years-prison-unde
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/biden-xi-meet-saturday-peru-us-officials-say"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/brazils-first-lady-aims-explicit-joke-key-target-husbands-administrati
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/could-biden-copy-obama-december-surprise-at-un-punish-israels-netanyah
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/cruz-says-un-draft-resolution-against-israel-aimed-undermining-incomin
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/dead-stampede-religious-gathering-northern-india"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/documents-reveal-russias-initial-peace-deal-equated-surrender-ukraine-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/finland-looks-joining-nato-without-sweden-pushback-turkey"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/fire-destroys-thousands-works-art-main-gallery-georgias-separatist-reg
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/fire-kills-least-10-people-spanish-retirement-home
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/foul-play-ruled-out-month-after-body-walmart-employee-found-inside-wal
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/french-official-says-ultra-left-activist-arrested-breaking-railway-sit
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/germany-braces-under-collapsing-government-looming-trump-trade-war&quo
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/hezbollah-generates-funds-activities-guise-non-profit-israeli-official
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/hong-kong-journalists-sentenced-sedition-promoting-illegal-ideologies&
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/how-us-backed-un-resolution-failed-stop-hezbollah-terror-takeover-bipa
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/indias-capital-introduces-stricter-anti-pollution-measures-toxic-smog-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/indias-popular-polarizing-leader-narendra-modi-extending-decade-power&
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/iran-denies-involvement-trump-assassination-plot-outlined-doj-report-m
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/iran-military-heads-vow-crushing-response-israel-un-atomic-chief-says-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/iran-revolutionary-guards-commander-says-revenge-coming-for-soleimani-
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/iran-told-biden-administration-wont-try-assassinate-president-elect-tr
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/israel-slams-german-governments-vow-arrest-prime-minister-netanyahu-ov
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/israel-takes-out-another-hezbollah-leader-projectiles-intercepted-near
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/israeli-strike-kills-hezbollah-spokesman-beirut-gaza-airstrikes
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/israels-new-defense-minister-says-country-has-defeated-hezbollah"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/israels-strike-iran-took-missile-defense-systems-islamic-republic-is-e
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/leader-georgias-separatist-region-abkhazia-resigns-ending-unrest
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/meeting-biden-chinas-xi-cautions-us-make-wise-choice-keep-relations-st
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/mexican-president-might-changing-view-us-trump-win-sends-warning-rulin
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/netanyahu-confirms-israel-strike-against-iran-hit-nuke-program-during-
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/netanyahu-signals-tehrans-nuclear-program-could-next-target-iran-plans
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/pro-putin-party-wins-contested-election-georgia-drifts-further-from-us
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/protest-anthem-glory-hong-kong-outlawed-city"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/protesters-storm-putin-backed-parliament-georgia-breakaway-region
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/protesters-storm-putin-backed-parliament-georgia-breakaway-region&quot
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/putin-looks-halt-neighboring-georgias-western-ambitions-vital-election
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/putin-lowers-threshold-nuclear-response-biden-admin-pledges-new-fundin
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/putin-signs-revised-doctrine-lowering-threshold-nuclear-response-russi
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/rare-tool-dating-back-3500-years-found-uk"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/scientists-argentina-unearth-oldest-tadpole-fossil-ever-discovered
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/son-norway-crown-princess-arrested-suspicion-rape
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/spain-searches-bodies-unprecedented-flooding-claims-least-158-lives&qu
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/spanish-soldiers-firefighters-battle-to-extinguish-fire-that-has-destr
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/sweden-finland-norway-release-new-advice-surviving-war-amid-concerns-o
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/sweden-nato-membership-report-russia"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/ten-newborn-babies-die-india-fire-rips-hospital-neonatal-unit
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/thune-threatens-international-criminal-court-sanctions-doesnt-drop-net
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/trump-looms-large-biden-set-meet-chinas-xi-during-latin-america-summit
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/ukraine-fires-first-barrage-us-made-long-range-missiles-russia-kremlin
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/ukrainian-troops-train-trench-warfare-near-frances-wwi-battlefields
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/ukrainian-troops-train-trench-warfare-near-frances-wwi-battlefields&qu
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/un-israel-odds-over-cause-decline-aid-deliveries-false-narratives-inte
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/un-watchdog-warns-time-maneuver-irans-nuclear-program-shrinking-report
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/us-allies-accuse-russia-escalating-hybrid-activities-against-nato-eu-n
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/walmart-employee-found-dead-inside-walk-in-oven-canada-store-police&qu
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/what-does-president-donald-trumps-win-mean-us-amid-ongoing-war-between
Source: chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/zelenskyy-russia-using-iranian-weapons-massive-attack-targeting-energy
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.foxnews.com/world/zelenskyy-warns-north-korea-russia-alliance-could-spell-trouble-asia-c
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.government.se/speeches/2024/01/speech-by-minister-for-civil-defence-carl-oskar-bohlin-at
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.hrw.org/news/2020/12/14/us-sanctions-international-criminal-court#_What_is_the_1"
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.icc-cpi.int/news/prosecutor-international-criminal-court-fatou-bensouda-requests-judicia
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.icc-cpi.int/news/situation-ukraine-icc-judges-issue-arrest-warrants-against-vladimir-vla
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.rferl.org/a/Russia_Recognizes_Abkhazia_South_Ossetia/1193932.html"
Source: chromecache_49.1.dr	String found in binary or memory: https://www.understandingwar.org/backgrounder/interactive-map-hundreds-known-russian-military-object
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.wsj.com/world/middle-east/iran-told-u-s-it-wasnt-trying-to-kill-trump-c2d8267d?mod=hp_le
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: https://x.com/araghchi/status/1855277524839731593?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49868 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/21@14/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2180,i,3917518086774542599,8825394850173494803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2180,i,3917518086774542599,8825394850173494803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13	0%	Avira URL Cloud	safe
http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://www.icc-cpi.int/news/prosecutor-international-criminal-court-fatou-bensouda-requests-judicia	0%	Avira URL Cloud	safe
http://coecy.aerolandresidence.com/assets/about_styles.css	0%	Avira URL Cloud	safe
https://www.icc-cpi.int/news/situation-ukraine-icc-judges-issue-arrest-warrants-against-vladimir-vla	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
coecy.aerolandresidence.com	185.246.86.14	true	false	unknown
www.google.com	142.250.185.196	true	false	high
moxie.foxnews.com	unknown	unknown	false	high
www.foxnews.com	unknown	unknown	false	high
feeds.foxnews.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://coecy.aerolandresidence.com/t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13	false		unknown
http://coecy.aerolandresidence.com/assets/about_styles.css	false	Avira URL Cloud: safe	unknown
http://coecy.aerolandresidence.com/about	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/georgia.jpg?v	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/biden-xi-meeting-will-be-forum-for-intense-diplomacy-amid-tensions-	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/health/mental-health"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/trump-allies-warn-biden-risking-world-war-iii-authorizing-long-rang	chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/china"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/hong-kong"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/top-trump-allies-meet-netanyahu-israel-icc-seeks-arrest-warrants&qu	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/little-tadpol	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/biden-xi-meet-saturday-peru-us-officials-say"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.wsj.com/world/middle-east/iran-told-u-s-it-wasnt-trying-to-kill-trump-c2d8267d?mod=hp_le	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/putin-lowers-threshold-nuclear-response-biden-admin-pledges-new-fundin	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/mohammed-afif	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/us/iranian-asset-2-others-charged-plot-assassinate-trump-doj-says"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/us/identity-badly-decomposed-body-found-ohio-car-wash-released-report"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.bbc.com/news/articles/cjr4zwj2lgdo"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://news.sky.com/story/marius-borg-hoiby-eldest-son-of-norways-crown-princess-mette-marit-arrest	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/israeli-strike-kills-hezbollah-spokesman-beirut-gaza-airstrikes	chromecache_49.1.dr	false		high
https://www.foxnews.com/category/us/crime/police-and-law-enforcement"	chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/biden-xi-meet-sidelines-apec-conference-bay-area"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/topic/world-war-one"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/israel-takes-out-another-hezbollah-leader-projectiles-intercepted-near	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.icc-cpi.int/news/situation-ukraine-icc-judges-issue-arrest-warrants-against-vladimir-vla	chromecache_50.1.dr, chromecache_49.1.dr	false	Avira URL Cloud: safe	unknown
https://www.foxnews.com/world/protesters-storm-putin-backed-parliament-georgia-breakaway-region	chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/08/931/523/bibi-khamenei	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/crime"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/person/joe-biden"	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/spanish-soldiers-firefighters-battle-to-extinguish-fire-that-has-destr	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/vladimir-puti	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.hrw.org/news/2020/12/14/us-sanctions-international-criminal-court#_What_is_the_1"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/fire-kills-least-10-people-spanish-retirement-home	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/sweden-nato-membership-report-russia"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/spain"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/person/benjamin-netanyahu"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/documents-reveal-russias-initial-peace-deal-equated-surrender-ukraine-	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/walmart-employee-found-dead-inside-walk-in-oven-canada-store-police&qu	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/health/healthy-living/womens-health"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/germany-braces-under-collapsing-government-looming-trump-trade-war&quo	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/us/migrant-center-leader-hopes-president-trump-doesnt-bring-back-remain-mexi	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.understandingwar.org/backgrounder/interactive-map-hundreds-known-russian-military-object	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/us-allies-accuse-russia-escalating-hybrid-activities-against-nato-eu-n	chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/waltz-rubio-trump-national-security"	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/israels-new-defense-minister-says-country-has-defeated-hezbollah"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/south-koreas-president-picking-golf-hopes-impress-trump"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/aptopix-biden	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/spain-searches-bodies-unprecedented-flooding-claims-least-158-lives&qu	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/trump-looms-large-biden-set-meet-chinas-xi-during-latin-america-summit	chromecache_49.1.dr	false		high
https://www.foxnews.com/category/science/archaeology/dinosaurs"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/ukraine-fires-first-barrage-us-made-long-range-missiles-russia-kremlin	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/cruz-says-un-draft-resolution-against-israel-aimed-undermining-incomin	chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/gettyimages-2	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://pubsubhubbub.appspot.com/	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/politics/foreign-policy/state-department"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/united-nations"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/canada"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.icc-cpi.int/news/prosecutor-international-criminal-court-fatou-bensouda-requests-judicia	chromecache_50.1.dr, chromecache_49.1.dr	false	Avira URL Cloud: safe	unknown
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/georgia-abkha	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/thune-adamant-about-trump-support-driving-maga-agenda-despite-tense	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/indias-popular-polarizing-leader-narendra-modi-extending-decade-power&	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/mexican-president-might-changing-view-us-trump-win-sends-warning-rulin	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/sweden-finland-norway-release-new-advice-surviving-war-amid-concerns-o	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/hezbollah-generates-funds-activities-guise-non-profit-israeli-official	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/meeting-biden-chinas-xi-cautions-us-make-wise-choice-keep-relations-st	chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/family-mourns	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/dead-stampede-religious-gathering-northern-india"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxbusiness.com/markets/usmca-trade-deal-nafta"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
http://search.yahoo.com/mrss/	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/scientists-argentina-unearth-oldest-tadpole-fossil-ever-discovered	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/ukrainian-troops-train-trench-warfare-near-frances-wwi-battlefields&qu	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/europe"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/world-regions/israel"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/un-israel-odds-over-cause-decline-aid-deliveries-false-narratives-inte	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/biden-misses-g-20-family-photo-white-house-blames-logistical-issues	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/netanyahu-signals-tehrans-nuclear-program-could-next-target-iran-plans	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/01/931/523/hong-kong-pol	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/iran-military-heads-vow-crushing-response-israel-un-atomic-chief-says-	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/biden-reverses-trump-era-policies-lifts-sanctions-on-international-	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/ten-newborn-babies-die-india-fire-rips-hospital-neonatal-unit	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/pro-putin-party-wins-contested-election-georgia-drifts-further-from-us	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/protest-anthem-glory-hong-kong-outlawed-city"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/india-babies.	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/trump-team-reacts-report-president-elect-told-russias-putin-not-esc	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world	chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/roman-road-ol	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2022/04/931/523/Joe-Biden-Ukr	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/2000-year-old-roman-road-discovered-archaeologists-london	chromecache_49.1.dr	false		high
https://www.foxnews.com/world/indias-capital-introduces-stricter-anti-pollution-measures-toxic-smog-	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/politics/iran-informs-un-nuclear-watchdog-of-increased-uranium-production&qu	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.rferl.org/a/Russia_Recognizes_Abkhazia_South_Ossetia/1193932.html"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/son-norway-crown-princess-arrested-suspicion-rape	chromecache_49.1.dr	false		high
https://www.foxbusiness.com/category/walmart"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/travel/regions/south-america"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/finland-looks-joining-nato-without-sweden-pushback-turkey"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/category/world/conflicts"	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2024/11/931/523/finland-cable	chromecache_50.1.dr, chromecache_49.1.dr	false		high
https://www.foxnews.com/world/iran-told-biden-administration-wont-try-assassinate-president-elect-tr	chromecache_49.1.dr	false		high
https://www.foxnews.com/category/science/archaeology"	chromecache_50.1.dr, chromecache_49.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
185.246.86.14	coecy.aerolandresidence.com	France	21409	IKOULAFR	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559019
Start date and time:	2024-11-20 03:50:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/21@14/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.185.78, 66.102.1.84, 34.104.35.123, 151.101.2.132, 151.101.66.132, 151.101.130.132, 151.101.194.132, 2.18.64.10, 2.18.64.35, 199.232.210.172, 192.229.221.95, 142.250.186.106, 142.250.74.202, 142.250.186.138, 142.250.185.138, 142.250.186.170, 142.250.185.170, 142.250.185.106, 142.250.186.74, 172.217.18.10, 216.58.206.42, 142.250.181.234, 142.250.185.202, 172.217.16.202, 142.250.184.202, 142.250.186.42, 142.250.185.234, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, j.sni.global.fastly.net, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, www.foxnews.com.edgekey.net, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, moxie.foxnews.com.edgekey.net, e197183.dsca.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	4.7130828204283555
Encrypted:	false
SSDEEP:	24:UkvMuGRKe7+U6eSEMDSaGvMdufqGmnoSPfzS7pvMugQrYFv0CGSTYFUL9MtDY3Ss:Uk9w7x9sHGgufRNkz09fcFMCGJFUL9MO
MD5:	1FB5EDFEA0AF10D301EFCD56738BA30A
SHA1:	1AAC6EB08825AD63AC334CFF1F816CC9ECA71219
SHA-256:	161D0961994DD86814FAFBA6EDD6FA7A75D17B19B2E60E1EE01ADAA9EA19DADC
SHA-512:	A0C3F78B663E01D24DDD53AF6D0D1E3E9DD743C3E4CB6FC8F45588BCC37AB3923A2992505C4842D9E451692A7E7495155F58BFED056BCFE57E02204603F962DD
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/assets/styles.css
Preview:	body {. font-family: Arial, sans-serif;. background-color: #f0f0f0;. display: flex;. justify-content: center;. align-items: center;. height: 100vh;. margin: 0;. padding: 0;.}...container {. background-color: #ffffff;. padding: 30px;. border-radius: 10px;. box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);. text-align: center;.}..h1 {. font-size: 36px;. margin-bottom: 20px;. color: #333;.}..p {. font-size: 18px;. color: #777;. margin-bottom: 40px;.}...countdown {. display: flex;. justify-content: center;. margin-bottom: 40px;.}...countdown-item {. display: inline-block;. margin: 0 10px;.}...countdown-item span {. font-size: 24px;. color: #444;.}...countdown-item label {. display: block;. font-size: 14px;. color: #999;.}..form {. display: flex;. justify-content: center;. align-items: center;. flex-direction: column;.}..input[type="email"] {. font-size: 16px;. padding: 10px;. border: 1px sol

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	714
Entropy (8bit):	4.640934656505668
Encrypted:	false
SSDEEP:	12:U068a0fvM2SMGRDGW4Q1bTNKqkFk80MFr+jF35PHtXFGSECp3t6FGSECpa6FGSEI:UkvMuGRKePcV1YF3LX8SECVt68SEC06l
MD5:	4BE8EF55271B17CF4B27C93F9C21044F
SHA1:	9D0DA00EC2C6BD31D3EECCF4F97B9D9DFB409822
SHA-256:	48796E60D0E2924366A3E3BBFC06A948C1D631AB0B8DFA27E2CA9F8EE58053E7
SHA-512:	B7ACE1CA1DE39D61154D26C0306AA5EF64E64C08FA1B15EE406CA887D23D59DF30A3FC73E143C8C87B5F71291F9B918DE207DEF1C77AF91046C7564E60CE4517
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/assets/about_styles.css
Preview:	body {. font-family: Arial, sans-serif;. background-color: #f0f0f0;. display: flex;. justify-content: center;. align-items: center;. height: 100vh;. margin: 0;. padding: 0;.}...container {. width: 80%;. margin: auto;. overflow: hidden;. padding: 0 2rem;. background-color: #fff;. padding: 2rem;. border-radius: 5px;. box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);.}..h1 {. font-size: 2rem;. color: #333;. margin-bottom: 1rem;.}..p {. font-size: 1rem;. color: #333;. margin-bottom: 1rem;.}..ul {. font-size: 1rem;. color: #333;. margin-bottom: 1rem;. padding-left: 1.5rem;.}..li {. margin-bottom: 0.5rem;.}.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnuMFBMb6NLaRIFDYOoWz0=?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (398)
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	5.131460290374407
Encrypted:	false
SSDEEP:	12:8AaJ+dAW1FTWoK9xGixFoBwdNDJNZUSbZkXCABHRsqq+7p:8bJOAWYragNvZUSuzRsqZp
MD5:	0A3E69B8B37A6DF0ACD7E7F5D9D3B854
SHA1:	680DE96CFE2AFF1B030BFBD4A7CFA2529993EA61
SHA-256:	0F3A07F36D6BDDEE418F7D7548BC165B09817E10764A359D2773388CDEC9FF8A
SHA-512:	9C5C0679E082A5776536835110B90436CD6531E3B2C4FC7A15BDCE7F550D6647447C904E68D660FAF81E39C108E17198830E8B133E86D8559180FA6FB5CE25C7
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13
Preview:	<script>.let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase(),n=0;n<o.length;n++)if(t.indexOf(o[n])>-1)return!0;return!1}(navigator.userAgent)?setTimeout((function(){document.location.href=o}),1e3):console.log("bt");.</script>..<p style="color:gray;">redirect...</p>.

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (8046)
Category:	dropped
Size (bytes):	187382
Entropy (8bit):	4.7851651783315186
Encrypted:	false
SSDEEP:	3072:wY0hwt9U0sa94kmgQwOAlgqSRb2N35N6xszouD1ohJmgz1bOtUMTalRiwsA3uecj:wY0hwt9U0sa94kmnwOAlgqSRb2N35N6a
MD5:	49E8A624C73F59E17FB124727A68B3F3
SHA1:	895CD45D66C2258AA0A7DD2D0CD89EBC6EAE949C
SHA-256:	EA0FEA7DCCA8303C823A737FB33919F067EC370C7276621BD62B414AAE00ADF7
SHA-512:	1970D99B36130F3F7B3CB8AAACB43B190F730E461792EA7BF67D1A0D644BAA38488F1DFF0D8D3C96BA50586AADE7DF75EAB11CDB52C2BAEDDAA3BD5BE1ADB154
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">. <channel>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. <description>See the latest world news and international news on Fox News. Learn all about the news happening around the world.</description>. <copyright>Copyright 2024 FOX News Network</copyright>. <language>en-us</language>. <pubDate>Tue, 19 Nov 2024 19:11:14 -0500</pubDate>. <image>. <url>https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png</url>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. </image>. <atom:link rel="self" href="https://moxie.foxnew

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (8046)
Category:	downloaded
Size (bytes):	187382
Entropy (8bit):	4.7851651783315186
Encrypted:	false
SSDEEP:	3072:wY0hwt9U0sa94kmgQwOAlgqSRb2N35N6xszouD1ohJmgz1bOtUMTalRiwsA3uecj:wY0hwt9U0sa94kmnwOAlgqSRb2N35N6a
MD5:	49E8A624C73F59E17FB124727A68B3F3
SHA1:	895CD45D66C2258AA0A7DD2D0CD89EBC6EAE949C
SHA-256:	EA0FEA7DCCA8303C823A737FB33919F067EC370C7276621BD62B414AAE00ADF7
SHA-512:	1970D99B36130F3F7B3CB8AAACB43B190F730E461792EA7BF67D1A0D644BAA38488F1DFF0D8D3C96BA50586AADE7DF75EAB11CDB52C2BAEDDAA3BD5BE1ADB154
Malicious:	false
Reputation:	low
URL:	https://moxie.foxnews.com/google-publisher/world.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">. <channel>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. <description>See the latest world news and international news on Fox News. Learn all about the news happening around the world.</description>. <copyright>Copyright 2024 FOX News Network</copyright>. <language>en-us</language>. <pubDate>Tue, 19 Nov 2024 19:11:14 -0500</pubDate>. <image>. <url>https://global.fncstatic.com/static/orion/styles/img/fox-news/logos/fox-news-desktop.png</url>. <title>Latest World News on Fox News</title>. <link>https://www.foxnews.com/world</link>. </image>. <atom:link rel="self" href="https://moxie.foxnew

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	4.857464095079759
Encrypted:	false
SSDEEP:	48:ZSPJJpI4LLIk6ddLHJy8A3SXUV/ot5CjsEn+yxw4Dj7jvj:m3LLIk6T9yvGssE5x7
MD5:	4F11D904349F88937EBAF7855287F156
SHA1:	D2D05ECF3DA5375D5EE9B74E6C17E28CA3D6031D
SHA-256:	CA04BF4674E443EA44C015D6E9BD06736B34762A137380E590844B376107D40A
SHA-512:	458C179C21B385C6479CB20D44FCF800C78A723D9D390045A2E65956AD6257BAC8AE36CB9D69FC49D350523C5E4D7FEEC1F44EDA844015C6D0108766CB69D1D9
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/
Preview:	.............<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Coming Soon - mrsbagbag.com</title>.. <link rel="stylesheet" href="/assets/styles.css">..</head>.<body>.<div class="container">. <h1>Our Website is Coming Soon!</h1>. <p>We are working hard to give you the best experience. Stay tuned!</p>. <div class="countdown">. <div class="countdown-item">. <span id="days">00</span>. <label>Days</label>. </div>. <div class="countdown-item">. <span id="hours">00</span>. <label>Hours</label>. </div>. <div class="countdown-item">. <span id="minutes">00</span>. <label>Minutes</label>. </div>. <div class="countdown-item">. <span id="seconds">00</span>. <label>Seconds</label>. </div>. </div>.. <form id="subscription-form" onsubmit="s

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3192
Entropy (8bit):	4.576750249532883
Encrypted:	false
SSDEEP:	48:vu7C1AFRZpvtph6F6BgxVbaCdQciJ2ZBgof6PM5FGxs7vtj:vum1Yd6ygx4cA2
MD5:	6DABD72369E739053597663BF1A1B027
SHA1:	BEC285C542374A3685CF807CCA0ED15D921FC592
SHA-256:	C99CE938F3C85FC946C4190CB28F1E66BA8E4AFBDE341BCA3C950DA50310B569
SHA-512:	D049AC1D9EBC9BD2AC8DEF5565973D8133F8D54E2381D381E9920240B7DCA3A72DB0C401D68861AFA99184709E0F72780234F04EC92B371CA27F38DB880F700C
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/news
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Fox News World RSS Feed - mrsbagbag.com </title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f6f9;. color: #333;. margin: 0;. padding: 0;. }.. .container {. width: 80%;. margin: 0 auto;. }.. h1 {. font-size: 2rem;. margin: 2rem 0;. }.. .news-item {. background-color: white;. padding: 1.5rem;. margin-bottom: 1rem;. box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);. }.. .news-item h2 {. font-size: 1.5rem;. margin-bottom: 1rem;. }.. .news-item a {. color: #1a73e8;. text-decoration: none;. }.. .news-item a:hover

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (454), with CRLF line terminators
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	4.632104145813841
Encrypted:	false
SSDEEP:	48:FKzUUtfTbGHdPJQLwVXjpG6qkdZA98zE9bH2Mjn9TAc:9UtrbG9bVXsNyA98zEEMjn9TH
MD5:	DA6A698AE398723C394CE3390FB9D6E6
SHA1:	686163E4565FBDE94F5D3AF8EA323F81AFF0DEEC
SHA-256:	027848D4DE6287E993C5C276A07D644948897310EE7B03E5E8EDEDA082351BC5
SHA-512:	E3E2D88F758A38A14F680D9F0B9FD9679A5FC460E9EDD61361E5519AACF60AFD34B5948B7E7AB169AC72CBAB0A3C615CCF6DE76986BBC478C09D04F22844799F
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/about
Preview:	........................<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>About Us - mrsbagbag.com</title>.. <link rel="stylesheet" href="/assets/about_styles.css">..</head>..<body>..<div class="container">.. <h1>About Our Email Marketing Agency</h1>.. <p>Our email marketing agency specializes in creating effective and engaging email campaigns tailored to meet the unique needs of businesses of all sizes. With a team of experienced marketing professionals, we are dedicated to helping our clients achieve their marketing goals and drive growth through the power of email marketing.</p>.. <p>At our agency, we understand the importance of personalized, targeted email marketing strategies. By combining cutting-edge technology with data-driven insights and creative expertise, we deliver email campaigns that resonate with your audience, foster customer loyalty, and increase co

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	210
Entropy (8bit):	5.098105294030167
Encrypted:	false
SSDEEP:	6:uIRnXHFmmmJ0S2IcENFJKSK/xIcEo/VMCGYoVL:lXHAx6S2SRcJ9IL
MD5:	05DA576EB71641B10811A1AEF60A853D
SHA1:	5E7C7F426430C30209FE270AB129A9C0100BDEE9
SHA-256:	58B98E11D36F9689D4AF3C1CB3755528817709300FACF6D314C99CE91BD90B4B
SHA-512:	2DAC5452E42E24043F512741B01E08CDEE464771A13C2D38D3F9958F75FCEA079F67A7B704AC6753C0BAB02DFDDD434AE7024D4674E3A532A70D50C5D6A72937
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13
Preview:	<script>.setTimeout(function(){. window.location.href = '/news?q=IP provider is blacklisted! LEVEL3'; . console.log('redirecting to /news?q=IP provider is blacklisted! LEVEL3');.}, 1000);.</script>.<p></p>.

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3192
Entropy (8bit):	4.576750249532883
Encrypted:	false
SSDEEP:	48:vu7C1AFRZpvtph6F6BgxVbaCdQciJ2ZBgof6PM5FGxs7vtj:vum1Yd6ygx4cA2
MD5:	6DABD72369E739053597663BF1A1B027
SHA1:	BEC285C542374A3685CF807CCA0ED15D921FC592
SHA-256:	C99CE938F3C85FC946C4190CB28F1E66BA8E4AFBDE341BCA3C950DA50310B569
SHA-512:	D049AC1D9EBC9BD2AC8DEF5565973D8133F8D54E2381D381E9920240B7DCA3A72DB0C401D68861AFA99184709E0F72780234F04EC92B371CA27F38DB880F700C
Malicious:	false
Reputation:	low
URL:	http://coecy.aerolandresidence.com/news?q=IP%20provider%20is%20blacklisted!%20LEVEL3
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Fox News World RSS Feed - mrsbagbag.com </title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f6f9;. color: #333;. margin: 0;. padding: 0;. }.. .container {. width: 80%;. margin: 0 auto;. }.. h1 {. font-size: 2rem;. margin: 2rem 0;. }.. .news-item {. background-color: white;. padding: 1.5rem;. margin-bottom: 1rem;. box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);. }.. .news-item h2 {. font-size: 1.5rem;. margin-bottom: 1rem;. }.. .news-item a {. color: #1a73e8;. text-decoration: none;. }.. .news-item a:hover

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:51:33.397397995 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 03:51:34.920017958 CET	49735	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:34.920236111 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:34.924999952 CET	80	49735	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:34.925091982 CET	49735	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:34.925154924 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:34.925221920 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:34.941004992 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:34.946959972 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:35.532457113 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:35.584559917 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:35.598445892 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:35.603470087 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:35.774002075 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:35.818249941 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:36.589554071 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:36.594706059 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:36.861435890 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:36.907876968 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:36.907968044 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:36.908054113 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:36.908962011 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:36.909001112 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:36.915615082 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:37.562055111 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:37.563193083 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:37.563251972 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:37.564393997 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:37.564469099 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:37.565839052 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:37.565918922 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:37.614491940 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:37.614504099 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:37.661397934 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:37.931837082 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:37.936929941 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:38.107728004 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:38.107784033 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:38.107821941 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:38.107857943 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:38.148164988 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:38.240679979 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:38.240767002 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:38.240854979 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:38.243870020 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:38.243908882 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:38.944295883 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:38.944484949 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:38.947900057 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:38.947928905 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:38.948375940 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:38.983603954 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.027343988 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:39.262916088 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:39.263057947 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:39.263144970 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.263144970 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.263225079 CET	49743	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.263266087 CET	443	49743	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:39.303297997 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.303410053 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:39.303515911 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.303860903 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:39.303915024 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.003752947 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.003874063 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:40.013596058 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:40.013622999 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.014040947 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.015966892 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:40.059364080 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.331440926 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.331613064 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:40.331682920 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:40.332474947 CET	49745	443	192.168.2.4	184.28.90.27
Nov 20, 2024 03:51:40.332494020 CET	443	49745	184.28.90.27	192.168.2.4
Nov 20, 2024 03:51:46.128612995 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:46.128667116 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:46.128797054 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:46.129878044 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:46.129916906 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:46.712989092 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:46.713120937 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:46.717319012 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:46.717372894 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:46.717706919 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:46.771716118 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.289747000 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.331406116 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480598927 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480655909 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480676889 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480694056 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480731010 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480736971 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.480752945 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480825901 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480875969 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.480875969 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.480909109 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.480921984 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480950117 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.480998039 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.481024027 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.481040001 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.481157064 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.481322050 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.512808084 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:47.512964010 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:47.513037920 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:47.836061001 CET	49740	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:51:47.836127043 CET	443	49740	142.250.185.196	192.168.2.4
Nov 20, 2024 03:51:47.967582941 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.967613935 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:47.967637062 CET	49747	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:51:47.967644930 CET	443	49747	20.12.23.50	192.168.2.4
Nov 20, 2024 03:51:49.346543074 CET	49723	80	192.168.2.4	93.184.221.240
Nov 20, 2024 03:51:49.351833105 CET	80	49723	93.184.221.240	192.168.2.4
Nov 20, 2024 03:51:49.351905107 CET	49723	80	192.168.2.4	93.184.221.240
Nov 20, 2024 03:51:56.087285042 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:56.092581987 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.263391018 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.263430119 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.263464928 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.263474941 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:56.263499022 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.263546944 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:56.287996054 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:51:56.292944908 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.463713884 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.463753939 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:51:56.463809013 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:06.970539093 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:06.975670099 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:07.146409988 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:07.146466017 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:07.146537066 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:07.159893036 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:07.164829016 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:07.335433960 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:07.381963015 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:18.971426010 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:18.976582050 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:19.147078991 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:19.147118092 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:19.147214890 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:19.147248983 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:19.147272110 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:19.147294044 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:19.927913904 CET	49735	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:19.932935953 CET	80	49735	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:24.457278013 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:24.457343102 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:24.457412958 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:24.457858086 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:24.457874060 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.072143078 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.072212934 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.076236963 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.076246023 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.076478004 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.085539103 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.131328106 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.205581903 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.205609083 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.205624104 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.205698013 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.205707073 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.205748081 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.285453081 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.285496950 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.285541058 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.285547972 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.285579920 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.285728931 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.285738945 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.285747051 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:25.285876989 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.285907984 CET	443	49754	20.12.23.50	192.168.2.4
Nov 20, 2024 03:52:25.286314964 CET	49754	443	192.168.2.4	20.12.23.50
Nov 20, 2024 03:52:26.843714952 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:26.843797922 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:26.843905926 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:26.844227076 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:26.844274044 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.482014894 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.482125044 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.483637094 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.483681917 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.483907938 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.490969896 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.531342030 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.588480949 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.588510990 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.588526011 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.588570118 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.588641882 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.588681936 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.588709116 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.674865961 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.674892902 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.675055027 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.675055027 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.675120115 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.675188065 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.676407099 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.676425934 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.676471949 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.676513910 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.676569939 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.676569939 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.760620117 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.760649920 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.760718107 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.760718107 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.760783911 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.760845900 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.762044907 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.762067080 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.762113094 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.762129068 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.762165070 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.762187958 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.763205051 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.763226032 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.763273954 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.763293028 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.763350010 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.764770985 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.764790058 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.764827013 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.764856100 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.764868975 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.764924049 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.847754002 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.847780943 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.847949028 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.847949028 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.848014116 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.848074913 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.848596096 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.848615885 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.848793983 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.848858118 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.848928928 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.849059105 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849073887 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849276066 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.849339008 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849410057 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.849838972 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849858046 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849920988 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.849936962 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.849992990 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.850171089 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.850184917 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.850245953 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.850261927 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.850315094 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851054907 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851072073 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851135015 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851147890 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851207018 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851471901 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851535082 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851547956 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851572990 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.851602077 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851634979 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851634979 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851677895 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.851705074 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.904881954 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.904927969 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.905006886 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.907835960 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.907924891 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.908013105 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.908080101 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.908097029 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.909907103 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.909987926 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.911052942 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911075115 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.911149979 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911530972 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911545992 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.911695957 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911751032 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.911850929 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911967993 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.911999941 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.912053108 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.912097931 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.912113905 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:27.912230968 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:27.912242889 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.552732944 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.553349018 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.553430080 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.553869009 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.553884029 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.571084023 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.571577072 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.571594000 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.572061062 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.572065115 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.576427937 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.576483965 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.576740980 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.576777935 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.577099085 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.577105999 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.577306032 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.577312946 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.577676058 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.577680111 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.584430933 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.584728003 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.584820032 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.585073948 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.585088015 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.671747923 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.671783924 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.671853065 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.671917915 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.671986103 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.672054052 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.672071934 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.672127008 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.672250986 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.672292948 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.672408104 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.675167084 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.675254107 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.675534964 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.675534964 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.675671101 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676350117 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676371098 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676420927 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.676433086 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676479101 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.676554918 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676609993 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676660061 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.676660061 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.676687956 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.676707029 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.676712036 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.679558992 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.679611921 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.679826975 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.679925919 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.679974079 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.679974079 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.679990053 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.680001020 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.680453062 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.680608034 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.680668116 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.680788994 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.680793047 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.680803061 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.680805922 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.681135893 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.681158066 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.681267023 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.681745052 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.681756973 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.682117939 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.682202101 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.682286024 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.682375908 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.682399035 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.682857990 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.682929993 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.683094025 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.683172941 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.683195114 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.690361977 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.690417051 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.690583944 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.690663099 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.690664053 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.690706968 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.690737009 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.692487001 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.692529917 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:28.692608118 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.692734003 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:28.692751884 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.327013016 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.327878952 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.327913046 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.328393936 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.328401089 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.330514908 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.331561089 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.331641912 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.331953049 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.331968069 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.333271980 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.337169886 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.337256908 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.337584972 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.337639093 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.374764919 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.375560045 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.375638962 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.375965118 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.375978947 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.400304079 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.403407097 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.403445005 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.403815985 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.403822899 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.426419020 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.426495075 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.426637888 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.426696062 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.426716089 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.426728010 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.426733971 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.430428028 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.430489063 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.430577040 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.430998087 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.431035042 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.431075096 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.431082964 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.431102037 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.431117058 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.431180000 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.431355953 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.431395054 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.433433056 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.433490992 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.435400963 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.435508966 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.435544014 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.470690012 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.470762014 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.470865011 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.471009970 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.471049070 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.471091986 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.471107006 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.473380089 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.473414898 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.473608971 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.473761082 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.473774910 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.477942944 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.477998972 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.478087902 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.478241920 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.478241920 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.478271961 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.478296995 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.480132103 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.480171919 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.480238914 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.480366945 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.480386019 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.505068064 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.505239964 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.505316973 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.505361080 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.505361080 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.505384922 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.505405903 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.507891893 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.507908106 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:29.507989883 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.509182930 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:29.509195089 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.093899965 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.096777916 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.146987915 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.147023916 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.154876947 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.179631948 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.195966959 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.227937937 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.251267910 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:30.251831055 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.251842976 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.252382994 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.252435923 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.252438068 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.252439976 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.252703905 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.252733946 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.252911091 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.252957106 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.252962112 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.252964973 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.253360987 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.253364086 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.253367901 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.253422022 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.256122112 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:30.352348089 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.352524996 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.352612019 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.352978945 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.352997065 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.353008986 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.353014946 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.354487896 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.354581118 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.354651928 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.355192900 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.355192900 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.355237007 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.355267048 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.355513096 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.355664015 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.355711937 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.356498957 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.356583118 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.356662035 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.357206106 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.357211113 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.357219934 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.357223988 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.358710051 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.358743906 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.358793974 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.358896017 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.358937025 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.359163046 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.359175920 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.360508919 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.360603094 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.360877991 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.360877991 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.361025095 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.394045115 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.394166946 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.394249916 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.394330978 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.394330978 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.394371986 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.394403934 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.396895885 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.396908045 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.396975040 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.397103071 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.397111893 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.428003073 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:30.428472042 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:30.428488970 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:30.428531885 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:30.478351116 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:30.998786926 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.999324083 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.999340057 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:30.999871016 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:30.999876022 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.030616045 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.031328917 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.031341076 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.031569004 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.031573057 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.036895990 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.037362099 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.037451029 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.037657976 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.037672997 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.037724972 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.038045883 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.038131952 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.038465023 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.038480997 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.101634979 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.101763010 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.101841927 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.102034092 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.102034092 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.102050066 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.102065086 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.104934931 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.104973078 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.105055094 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.105201006 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.105216980 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.130347967 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.130408049 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.130482912 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.130809069 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.130809069 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.130820036 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.130827904 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.133445978 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.133529902 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.133721113 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.133897066 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.133938074 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.142450094 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.142587900 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.142674923 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.142752886 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.142754078 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.142793894 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.142807961 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.143979073 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.144049883 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.144247055 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.144247055 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.144247055 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.146686077 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.146707058 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.146769047 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.146912098 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.146928072 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.147226095 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.147310972 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.147392988 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.147491932 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.147522926 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.443716049 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.443779945 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.659128904 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.660007954 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.660024881 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.660566092 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.660572052 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.760198116 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.760413885 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.760591030 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.760591030 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.760591030 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.763487101 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.763514042 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.763581038 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.763751030 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.763762951 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.768560886 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.768903017 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.768987894 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.769330978 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.769345999 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.782802105 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.783109903 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.783195972 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.783557892 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.783612013 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.813671112 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.814033031 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.814053059 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.814435959 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.814441919 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.867938042 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.868000984 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.868067980 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.868216991 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.868233919 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.868247986 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.868253946 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.871144056 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.871232986 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.871500969 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.871500969 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.871644974 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.884572983 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.884635925 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.884700060 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.884799957 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.884823084 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.884838104 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.884845018 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.886970997 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.886996031 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.887115002 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.887237072 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.887248993 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.915863991 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.916016102 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.916101933 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.916152000 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.916169882 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.916183949 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.916189909 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.918262959 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.918304920 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:31.918376923 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.918497086 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:31.918509960 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.068193913 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.068217039 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.444535971 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.445375919 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.445393085 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.445697069 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.445700884 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.521215916 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.532659054 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.555609941 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.555625916 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.558125973 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.559878111 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.560020924 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.560102940 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.562926054 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.562932014 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.563575029 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.563656092 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.573263884 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.573319912 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.574413061 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.574474096 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.575321913 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.575375080 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.575512886 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.575512886 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.575535059 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.575546026 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.600248098 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.600287914 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.600388050 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.604089975 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.604104042 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.658411980 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.658560038 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.658623934 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.670747995 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.670890093 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.671088934 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.672890902 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.673026085 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.673095942 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.721060038 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.721077919 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.726316929 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.726316929 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.726351023 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.726366997 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.727212906 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.727214098 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.727300882 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.727370977 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.777411938 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.777455091 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.777517080 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.779268026 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.779387951 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.779489040 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780133009 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780175924 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.780281067 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780529022 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780544996 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.780670881 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780702114 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:32.780740023 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:32.780759096 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.067934990 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.068713903 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.068761110 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.069341898 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.069396019 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.308994055 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.309135914 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.309222937 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.309514046 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.309514046 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.309578896 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.309612989 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.312537909 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.312623024 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.312722921 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.312927961 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.312971115 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.317004919 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.317384958 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.317411900 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.317854881 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.317862034 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.414629936 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.414750099 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.414813042 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.414948940 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.414966106 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.414978027 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.414983988 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.417546988 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.417588949 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.417671919 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.417910099 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.417978048 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.495809078 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.496396065 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.496613026 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.496671915 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.496856928 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.496938944 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.497143984 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.497196913 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.497217894 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.497232914 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.504355907 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.504625082 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.504637957 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.504947901 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.504952908 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.595408916 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.595567942 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.595755100 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.595839977 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.595840931 CET	49788	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.595881939 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.595912933 CET	443	49788	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.598579884 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.598622084 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.598794937 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.598867893 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.598886013 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.607475042 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.607637882 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.607697010 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.607718945 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.607732058 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.607744932 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.607749939 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.609498024 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.609523058 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.609596014 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.609707117 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.609715939 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.614255905 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.614406109 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.614470005 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.614510059 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.614510059 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.614537954 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.614551067 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.616450071 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.616539955 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.616767883 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.616769075 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.616832972 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.966284037 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.966881037 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.966943026 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:33.967417955 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:33.967472076 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.067974091 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.068133116 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.068293095 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.068383932 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.068423033 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.068485975 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.068502903 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.071238995 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.071285963 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.071368933 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.071520090 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.071536064 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.101447105 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.102030039 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.102088928 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.102329016 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.102354050 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.206005096 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.206152916 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.206379890 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.206381083 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.206501007 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.206537962 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.209533930 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.209619999 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.209734917 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.210015059 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.210087061 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.234006882 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.234743118 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.234802961 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.235214949 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.235233068 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.249408007 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.249690056 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.249705076 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.250022888 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.250030041 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.285945892 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.286401033 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.286495924 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.286628008 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.286643028 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.332010031 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.332173109 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.332315922 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.332396984 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.332396984 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.332437992 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.332465887 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.335057020 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.335139990 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.335227966 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.335386992 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.335424900 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.350974083 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.351130009 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.351190090 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.351213932 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.351228952 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.351241112 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.351248026 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.353355885 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.353441000 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.353523970 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.353641987 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.353709936 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.395965099 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.396037102 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.396156073 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.396374941 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.396394968 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.396408081 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.396414042 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.398642063 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.398724079 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.398824930 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.398952007 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.399002075 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.712465048 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.713166952 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.713188887 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.713711023 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.713717937 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.832834005 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.832993984 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.833070040 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.833211899 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.833231926 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.833244085 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.833250046 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.836364985 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.836482048 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.836580038 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.836752892 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.836807013 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.846112967 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.846729040 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.846817017 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.847094059 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.847110987 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.945801020 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.945880890 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.946070910 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.946193933 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.946193933 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.946238041 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.946274996 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.949270010 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.949311972 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:34.949405909 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.949579954 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:34.949595928 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.020433903 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.022491932 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.022552013 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.022978067 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.023730993 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.023783922 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.024933100 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.024991035 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.025176048 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.025192976 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.064419031 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.064876080 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.064932108 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.065391064 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.065442085 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.121742964 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.121885061 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.122029066 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.122124910 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.122124910 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.122167110 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.122199059 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.124490976 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.124649048 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.124846935 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.124864101 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.124864101 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.124864101 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.124928951 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.125017881 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.125293970 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.125365019 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.127006054 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.127044916 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.127120018 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.127273083 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.127289057 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.168972969 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.169048071 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.169239998 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.169322014 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.169322014 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.169363022 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.169392109 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.171907902 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.172013998 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.172113895 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.172266960 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.172290087 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.427364111 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.427427053 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.504172087 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.504990101 CET	49735	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:35.507148027 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.507210970 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.507509947 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.507527113 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.510507107 CET	80	49735	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:35.510584116 CET	49735	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:35.587269068 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.588002920 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.588017941 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.588691950 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.588697910 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.607475996 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.607606888 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.607767105 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.607866049 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.607866049 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.607908010 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.607938051 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.611633062 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.611685038 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.611751080 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.611989021 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.612013102 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.688886881 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.689053059 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.689100027 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.689330101 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.689349890 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.689362049 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.689368963 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.692728043 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.692820072 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.692929029 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.693072081 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.693110943 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.770116091 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.770961046 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.771042109 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.771719933 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.771771908 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.796505928 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.796817064 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.796835899 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.797429085 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.797434092 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.812114000 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.812669992 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.812727928 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.813123941 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.813205957 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.868659019 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.868822098 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.869076967 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.869076967 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.869167089 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.869204998 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.871994019 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.872040033 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.872271061 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.872308969 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.872319937 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.899213076 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.899374962 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.899430037 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.899465084 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.899482012 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.899511099 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.899519920 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.901684046 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.901705027 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.901765108 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.901911974 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.901932001 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.912750006 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.912812948 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.912893057 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.912976980 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.912976980 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.913017988 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.913050890 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.914947987 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.915071011 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:35.915132999 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.915302038 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:35.915358067 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.281011105 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.281636000 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.281668901 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.282077074 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.282083988 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.334291935 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.334784985 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.334868908 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.335242033 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.335262060 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.384011984 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.384152889 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.384238005 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.384347916 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.384366035 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.384380102 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.384385109 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.387461901 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.387505054 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.387588024 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.387723923 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.387741089 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.433023930 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.433161974 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.433389902 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.433389902 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.435652018 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.435686111 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.435715914 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.435776949 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.435866117 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.435981035 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.436043978 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.543854952 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.544508934 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.544542074 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.545176983 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.545182943 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.554132938 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.554672956 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.554732084 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.555182934 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.555236101 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.590818882 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.591273069 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.591289997 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.591854095 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.591859102 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.646368027 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.646538019 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.646615028 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.646734953 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.646758080 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.646771908 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.646780968 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.650099993 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.650125027 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.650221109 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.650368929 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.650378942 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.661417007 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.661571980 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.661819935 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.661820889 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.661820889 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.664210081 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.664299965 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.664417028 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.664738894 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.664824963 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.699474096 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.699635983 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.699701071 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.699721098 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.699728966 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.699737072 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.699740887 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.701997995 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.702008963 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.702114105 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.702227116 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.702234983 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:36.929510117 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:36.929604053 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:36.929857969 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:36.930207968 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:36.930290937 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:36.974587917 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:36.974656105 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.143142939 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.144102097 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.144165039 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.144670010 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.144685984 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.146856070 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.147196054 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.147212029 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.147690058 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.147695065 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.244503021 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.244580984 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.244967937 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.244967937 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.244967937 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.249047995 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.249092102 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.249191999 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.249366045 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.249382019 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.251848936 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.252007008 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.252072096 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.252111912 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.252111912 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.252125025 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.252132893 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.254460096 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.254508972 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.254754066 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.254754066 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.254822969 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.328870058 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.329350948 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.329374075 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.329947948 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.329952955 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.338579893 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.338876963 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.338934898 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.339411974 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.339464903 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.380331039 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.380759954 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.380778074 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.381125927 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.381130934 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.429145098 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.429286957 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.429388046 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.429409981 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.429424047 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.429433107 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.429438114 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.431651115 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.431672096 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.431735992 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.431843996 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.431857109 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.442627907 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.442770004 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.442986012 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.442986012 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.442986965 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.445374966 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.445460081 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.445580006 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.445691109 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.445717096 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.484195948 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.484358072 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.484432936 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.484461069 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.484466076 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.484474897 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.484477997 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.486869097 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.486953020 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.487039089 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.487174034 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.487209082 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.552748919 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.552812099 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.755861998 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.755928040 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.768409967 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:37.768812895 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:37.768874884 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:37.769507885 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:37.769948006 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:37.770209074 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:37.818233967 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:37.908921957 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.909678936 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.909742117 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.910240889 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.910294056 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.929085016 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.929574966 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.929598093 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:37.930208921 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:37.930217981 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.009815931 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.009975910 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.010056019 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.010138988 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.010186911 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.010217905 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.010234118 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.013681889 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.013771057 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.014018059 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.014199018 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.014233112 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.033925056 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.034085989 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.034163952 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.034456968 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.034476042 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.034487009 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.034492970 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.037106991 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.037190914 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.037440062 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.037440062 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.037605047 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.078444004 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.078861952 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.078880072 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.079406023 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.079411030 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.111968994 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.112535000 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.112593889 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.112930059 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.112983942 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.158886909 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.159288883 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.159367085 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.159696102 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.159708977 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.177644968 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.177812099 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.177869081 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.177997112 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.178014040 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.178024054 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.178030014 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.180546045 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.180655003 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.180742025 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.180871964 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.180911064 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.221075058 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.221226931 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.221347094 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.221347094 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.221347094 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.223890066 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.223928928 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.224001884 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.224134922 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.224152088 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.289958954 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.290117979 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.290224075 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.290316105 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.290360928 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.290394068 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.290410042 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.293699026 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.293783903 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.294080973 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.294081926 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.294202089 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.443398952 CET	49724	80	192.168.2.4	93.184.221.240
Nov 20, 2024 03:52:38.449907064 CET	80	49724	93.184.221.240	192.168.2.4
Nov 20, 2024 03:52:38.450112104 CET	49724	80	192.168.2.4	93.184.221.240
Nov 20, 2024 03:52:38.521553993 CET	49819	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.521621943 CET	443	49819	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.654381037 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.655097008 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.655181885 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.655636072 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.655653000 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.703934908 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.704327106 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.704376936 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.704746962 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.704758883 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.754486084 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.754673004 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.754764080 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.754858017 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.754858017 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.754903078 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.754930973 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.758445024 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.758475065 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.758544922 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.758712053 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.758723021 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.805732965 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.805876017 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.805943012 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.806025028 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.806025982 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.806068897 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.806101084 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.808615923 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.808706045 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.808793068 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.809089899 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.809170008 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.831841946 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.832231045 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.832292080 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.832673073 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.832725048 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.876122952 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.876456976 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.876466990 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.876940966 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.876945019 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.967158079 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.967366934 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.967442036 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.967662096 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.967713118 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.967746973 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.967762947 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.971100092 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.971148014 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.971216917 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.971462965 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.971477985 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.992060900 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.992650986 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.992680073 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:38.993149996 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:38.993175983 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.011343002 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.011518002 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.011569977 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.011625051 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.011642933 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.011653900 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.011657953 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.014002085 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.014092922 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.014159918 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.014286041 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.014317989 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.129574060 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.129734993 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.129918098 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.129918098 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.129918098 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.132239103 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.132265091 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.132323980 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.132531881 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.132544994 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.443310976 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.443358898 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.468008041 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.468621016 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.468640089 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.469271898 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.469278097 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.536526918 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.537051916 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.537142038 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.537580013 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.537631989 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.581211090 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.581357002 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.581428051 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.581537008 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.581548929 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.581569910 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.581577063 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.584880114 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.584978104 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.585068941 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.585170984 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.585196018 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.639372110 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.639558077 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.639761925 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.639857054 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.639857054 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.639902115 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.639931917 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.644360065 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.644404888 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.644464970 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.644855976 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.644870996 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.666460037 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.669437885 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.669461966 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.670051098 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.670056105 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.700723886 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.701242924 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.701324940 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.701764107 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.701816082 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.791822910 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.791960955 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.792028904 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.792052031 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.792063951 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.792098045 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.792102098 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.794548988 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.794645071 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.794758081 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.794886112 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.794945002 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.820573092 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.820755005 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.820836067 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.820836067 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.820914984 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.820954084 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.822906017 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.822925091 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.822993994 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.823105097 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.823111057 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.825325966 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.825638056 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.825645924 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.826155901 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.826159954 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.928364038 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.928535938 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.928627014 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.929373980 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.929380894 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.929389954 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.929393053 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.931781054 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.931885958 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:39.931993961 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.932106972 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:39.932138920 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.279437065 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.281749010 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.281810999 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.282300949 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.282355070 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.302609921 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.303047895 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.303083897 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.303600073 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.303606033 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.384144068 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.384282112 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.384593964 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.384593964 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.384593964 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.387948036 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.388073921 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.388171911 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.388520002 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.388602018 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.402163982 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.402312994 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.402395010 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.402609110 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.402630091 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.402641058 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.402647018 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.405214071 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.405299902 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.405405045 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.405492067 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.405518055 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.439013958 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.439583063 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.439670086 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.440186977 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.440270901 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.478976011 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.479377985 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.479388952 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.479928970 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.479933977 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.542155027 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.542298079 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.542411089 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.542412043 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.542510033 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.542551994 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.544946909 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.545037031 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.545154095 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.545263052 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.545290947 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.573568106 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.574202061 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.574260950 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.574708939 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.574762106 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.580177069 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.580326080 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.580395937 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.580578089 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.580593109 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.580602884 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.580607891 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.583245993 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.583362103 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.583462954 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.583848000 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.583926916 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.672238111 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.672288895 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.672426939 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.672482014 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.672482967 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.673139095 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.673139095 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.673207998 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.673240900 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.678585052 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.678670883 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.678775072 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.678946972 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.679003000 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:40.709137917 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:40.709202051 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.046649933 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.047403097 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.047492027 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.048145056 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.048197031 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.068495989 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.069729090 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.069818020 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.070686102 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.070702076 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.146338940 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.146487951 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.146572113 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.146928072 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.146928072 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.146977901 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.147011995 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.150481939 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.150518894 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.150654078 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.150896072 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.150908947 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.172947884 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.173088074 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.173188925 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.173269987 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.173270941 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.173312902 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.173345089 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.176055908 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.176153898 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.176435947 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.176558018 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.176594019 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.206974983 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.207582951 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.207672119 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.208071947 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.208123922 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.264225006 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.264791012 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.264873028 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.265346050 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.265399933 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307352066 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307399988 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307482958 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.307545900 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307585955 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307657957 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.307760954 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.307800055 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.307828903 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.307843924 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.310612917 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.310631037 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.310719967 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.310883999 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.310894012 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.333039999 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.333462954 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.333544016 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.334856033 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.334880114 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.371149063 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.371215105 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.371375084 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.371404886 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.371467113 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.371633053 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.371675968 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.371709108 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.371725082 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.375082016 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.375171900 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.375286102 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.375473022 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.375524044 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.437046051 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.437079906 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.437186003 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.437299967 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.437299967 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.437537909 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.437561989 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.437576056 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.437583923 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.441185951 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.441235065 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.441334963 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.441535950 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.441553116 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.817189932 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.818502903 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.818594933 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.819284916 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.819366932 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.826453924 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.826843023 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.826875925 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.827373981 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.827378988 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.917532921 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.917782068 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.917897940 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.918059111 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.918059111 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.918107986 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.918134928 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.921638966 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.921731949 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.921976089 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.922090054 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.922120094 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.931346893 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.931478024 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.931535006 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.932445049 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.932457924 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.932477951 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.932483912 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.935556889 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.935673952 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.935786009 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.936098099 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.936177969 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.993459940 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.994018078 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.994049072 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:41.994611025 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:41.994616032 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.028502941 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.046911001 CET	49848	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:42.051167965 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:42.051346064 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.051419973 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.051846027 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.051898956 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.051919937 CET	80	49848	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:42.052027941 CET	49848	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:42.056082010 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:42.097409010 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.097698927 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.097784996 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.097845078 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.097863913 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.097876072 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.097881079 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.101691008 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.101727009 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.101800919 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.102011919 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.102025986 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.127091885 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.127616882 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.127687931 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.128325939 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.128377914 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.149053097 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.149250984 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.149450064 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.149451017 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.151170969 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.151237011 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.152403116 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.152493000 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.152595997 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.152820110 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.152852058 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.226758957 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:42.226926088 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:42.226942062 CET	80	49736	185.246.86.14	192.168.2.4
Nov 20, 2024 03:52:42.226999044 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:42.256726980 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.257009983 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.257129908 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.258271933 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.258271933 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.258372068 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.258411884 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.269989014 CET	49736	80	192.168.2.4	185.246.86.14
Nov 20, 2024 03:52:42.277968884 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.278006077 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.278090954 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.278274059 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.278286934 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.559025049 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.559845924 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.559887886 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.560262918 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.560290098 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.607939959 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.608627081 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.608674049 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.609077930 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.609087944 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.657510996 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.657753944 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.657823086 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.657941103 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.657974958 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.657989979 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.657996893 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.661412001 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.661504984 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.661585093 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.661782026 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.661822081 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.712104082 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.712271929 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.712344885 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.712388992 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.712388992 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.712409973 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.712424040 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.715116978 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.715152025 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.715220928 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.715357065 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.715363026 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.743138075 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.743650913 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.743668079 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.744122982 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.744127989 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.823241949 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.823707104 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.823744059 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.824148893 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.824155092 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.843836069 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.843992949 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.844058037 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.844165087 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.844182014 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.844192982 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.844199896 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.847105980 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.847194910 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.847311020 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.847438097 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.847464085 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.913408041 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.913825035 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.913844109 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.914278984 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.914284945 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.928314924 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.928468943 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.928534031 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.928567886 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.928567886 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.928585052 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.928599119 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.934067965 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.934109926 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:42.934179068 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.934300900 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:42.934309959 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.012837887 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.013477087 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.013689995 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.013690948 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.013690948 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.016405106 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.016460896 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.016546011 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.016681910 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.016696930 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.314642906 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.327063084 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.327100039 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.358575106 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.358668089 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.359179020 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.359220982 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.359232903 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.359585047 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.359622002 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.359951019 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.359956980 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.458494902 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.458646059 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.458755016 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.458791018 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.458823919 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.461883068 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.462043047 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.462099075 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.467901945 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.467927933 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.467941999 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.467948914 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.495594978 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.495594978 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.495614052 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.495621920 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.521121025 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.521150112 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.521222115 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.522011995 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.522025108 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.524997950 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.525021076 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.525083065 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.525213957 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.525223970 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.526125908 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.526433945 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.526453972 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.526882887 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.526889086 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.571011066 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.571430922 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.571441889 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.571861982 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.571871996 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.629466057 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.629556894 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.629597902 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.629714966 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.629714966 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.629738092 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.629738092 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.629748106 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.629757881 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.632482052 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.632497072 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.632566929 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.632688999 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.632700920 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.652195930 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.652632952 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.652643919 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.653040886 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.653044939 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.671360970 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.671544075 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.671592951 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.671678066 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.671684980 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.671696901 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.671700954 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.674954891 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.674982071 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.675035000 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.675268888 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.675285101 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.758537054 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.758594036 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.758642912 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.758816004 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.758822918 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.758852005 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.758856058 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.762049913 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.762094975 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:43.762160063 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.762445927 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:43.762460947 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.169397116 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.170030117 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.170046091 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.170555115 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.170561075 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.199284077 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.199824095 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.199887991 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.200213909 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.200268030 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.268980980 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.269058943 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.269115925 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.269141912 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.269190073 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.269238949 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.269385099 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.269397974 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.269408941 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.269413948 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.273076057 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.273113966 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.273180962 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.273691893 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.273758888 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.273777008 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.274069071 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.274132967 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.274498940 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.274516106 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.304527998 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.304733992 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.304820061 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.304909945 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.304909945 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.304955959 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.304985046 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.307449102 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.307548046 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.307641029 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.307991028 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.308073997 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.329302073 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.329632998 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.329657078 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.330017090 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.330028057 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.372086048 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.372226000 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.372287035 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.372461081 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.372486115 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.372503996 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.372510910 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.375036001 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.375082970 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.375160933 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.375310898 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.375335932 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.404419899 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.405081987 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.405143976 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.405580044 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.405633926 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.429749966 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.429945946 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.430020094 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.430095911 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.430111885 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.430124998 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.430131912 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.433114052 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.433160067 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.433249950 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.433393955 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.433409929 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.510341883 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.510798931 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.511045933 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.511046886 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.511046886 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.513149023 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.513238907 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.513322115 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.513449907 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.513499975 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.724939108 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.725007057 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.953532934 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.954108000 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.954127073 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:44.954562902 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:44.954569101 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.005964994 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.006478071 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.006561041 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.006865025 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.006880999 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.016097069 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.016486883 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.016518116 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.016892910 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.016904116 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.058690071 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.058738947 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.058813095 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.058834076 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.058856964 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.059076071 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.059092045 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.059103966 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.059109926 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.062184095 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.062277079 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.062369108 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.062513113 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.062536955 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.100205898 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.100709915 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.100786924 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.101171017 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.101182938 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.115684986 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.115911961 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.115992069 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.116019964 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.116086006 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.116174936 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.116175890 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.116220951 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.116250992 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.118967056 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.119014025 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.119092941 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.119208097 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.119220972 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.135685921 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.138097048 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.138179064 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.138222933 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.138246059 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.138264894 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.138273001 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.140422106 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.140456915 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.140542984 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.140680075 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.140695095 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.182759047 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.183182001 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.183243990 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.183593988 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.183609009 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.202349901 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.202516079 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.202748060 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.202749014 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.202749014 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.204607010 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.204622030 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.204827070 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.204827070 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.204853058 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.284949064 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.285083055 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.285191059 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.285295963 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.285341978 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.285388947 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.285404921 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.287367105 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.287460089 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.287724972 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.287724972 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.287857056 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.505824089 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.505903959 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.720269918 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.721155882 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.721195936 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.722177982 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.722189903 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.759141922 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.759752989 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.759771109 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.760673046 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.760678053 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.777086973 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.777723074 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.777791023 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.778443098 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.778496027 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.820197105 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.820352077 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.820411921 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.836067915 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.836113930 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.836133003 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.836141109 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.844321966 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.844367981 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.844434977 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.845298052 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.845318079 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.851469994 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.860255003 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.860632896 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.860704899 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.860712051 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.860755920 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.870268106 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.870281935 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.870759010 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.870764971 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.877981901 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.878226995 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.878292084 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.923907995 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.923957109 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.923980951 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.923990965 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.938827038 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.972362041 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.972410917 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.972429037 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:45.972436905 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:45.992201090 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.062066078 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.062099934 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.066438913 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.066457987 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.120309114 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.120492935 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.120563984 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.159010887 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.159122944 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.159234047 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.165738106 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.166090012 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.166244984 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.198009014 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.198087931 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.198153019 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.200351954 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.200388908 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.200404882 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.200412035 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.202980995 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.203072071 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.204757929 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.204757929 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.204828978 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.204868078 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.206355095 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.206397057 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.213043928 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213099003 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213136911 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.213188887 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.213222027 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213268042 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213597059 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213638067 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.213669062 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.213717937 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.516041994 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.516841888 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.516926050 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.517421961 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.517438889 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.619113922 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.619225025 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.619271040 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.619307041 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.619355917 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.619609118 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.619635105 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.619652033 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.619659901 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.623322964 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.623368979 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.624922037 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.628596067 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.628612995 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.857250929 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.861175060 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.861228943 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.861649990 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.861660957 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.880491018 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.881238937 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.881347895 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.881782055 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.881834984 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.885046959 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.885488987 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.885570049 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.886276960 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.886336088 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.917434931 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.917876005 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.917932034 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.918355942 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.918365002 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.960181952 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.960222006 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.960268021 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.960280895 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.960319996 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.960724115 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.960753918 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.960774899 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.960782051 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.964545012 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.964581013 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.964643955 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.964879990 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.964900017 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.986095905 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.986280918 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.986468077 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.986469030 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.986469030 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.987281084 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.987493992 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.987674952 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.987767935 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.987767935 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.987819910 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.987852097 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.989094973 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.989130974 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.989181042 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.989343882 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.989357948 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.991242886 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.991343021 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:46.991663933 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.991664886 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:46.991811037 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.042859077 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.042946100 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.043102980 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.043170929 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.043170929 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.043203115 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.043220043 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.047446966 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.047482014 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.047547102 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.047677994 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.047691107 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.293641090 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.294256926 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.294291973 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.294847012 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.294924021 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.294986963 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.294994116 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.393774986 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.394090891 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.394169092 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.394210100 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.394232035 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.394246101 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.394253016 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.397938013 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.397986889 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.398065090 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.399756908 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.399777889 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.600811005 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.601516008 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.601558924 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.602169037 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.602195978 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.628098011 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.632112980 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.632142067 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.632605076 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.632611036 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.634644985 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.634892941 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.634922981 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.635334015 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.635338068 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.696376085 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.696844101 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.696856022 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.697287083 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.697290897 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.704008102 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.704272985 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.704447985 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.704447985 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.704447985 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.707755089 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.707782030 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.707842112 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.707958937 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.707964897 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.729367018 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.729552984 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.729600906 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.729603052 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.729652882 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.729696035 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.729720116 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.729734898 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.729743004 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.732547998 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.732593060 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.732655048 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.732798100 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.732814074 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.739643097 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:47.739761114 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:47.739896059 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:47.739907026 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.739979029 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.740019083 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.740132093 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.740143061 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.740153074 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.740158081 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.742654085 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.742686033 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.742739916 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.742877960 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.742892981 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.799386978 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.799577951 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.799624920 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.799673080 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.799685955 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.799695969 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.799699068 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.802093983 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.802135944 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.802191973 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.802314997 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:47.802330971 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:47.837699890 CET	49815	443	192.168.2.4	142.250.185.196
Nov 20, 2024 03:52:47.837730885 CET	443	49815	142.250.185.196	192.168.2.4
Nov 20, 2024 03:52:48.006006956 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.006078005 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.081131935 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.081927061 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.081994057 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.082482100 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.082535028 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.188564062 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.188838005 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.188884020 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.189014912 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.189014912 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.189014912 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.189014912 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.192260027 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.192301035 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.192374945 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.192538977 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.192554951 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.373687029 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.374303102 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.374353886 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.374953032 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.374968052 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.377784967 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.378066063 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.378092051 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.378530025 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.378537893 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.391699076 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.392314911 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.392348051 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.392847061 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.392858028 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.437866926 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.438394070 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.438457966 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.438926935 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.438978910 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.480638027 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.480722904 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.480781078 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.480855942 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.480987072 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.481004953 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.481019020 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.481024981 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.481086016 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.481138945 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.481302977 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.481319904 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.481332064 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.481338024 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.484086037 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484144926 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.484232903 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484239101 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484287024 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.484345913 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484421968 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484440088 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.484515905 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.484536886 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.490461111 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.490525007 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.494246006 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.494318008 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.494426966 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.494499922 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.494499922 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.494587898 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.494587898 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.494630098 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.494662046 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.496882915 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.496927977 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.497044086 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.497174978 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.497191906 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.537765980 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.538393974 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.538441896 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.538458109 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.538491964 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.538537979 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.538559914 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.538577080 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.538583994 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.541384935 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.541476011 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.541610956 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.541716099 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.541740894 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.858206987 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.858809948 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.858829021 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.859435081 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.859441996 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.987086058 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.987277031 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.987560987 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.989032984 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.989032984 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.989054918 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.989067078 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.990705967 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.990804911 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:48.991002083 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.991168976 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:48.991194963 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.040800095 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.041320086 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.041348934 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.041929960 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.041941881 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.139564991 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.139636040 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.139755011 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.139797926 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.139831066 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.139975071 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.140001059 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.140034914 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.140043020 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.140449047 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.140922070 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.140984058 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.141464949 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.141482115 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.142848015 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.142885923 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.142987967 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.143126011 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.143135071 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.151213884 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.151592016 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.151621103 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.152112007 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.152129889 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.181173086 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.181504965 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.181593895 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.181893110 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.181910038 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.241056919 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.241280079 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.241486073 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.241538048 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.241564989 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.241606951 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.241621017 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.244971037 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.245064974 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.245174885 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.245326042 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.245352030 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.254359007 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.254607916 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.254667044 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.254719973 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.254740000 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.254755974 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.254762888 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.257389069 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.257410049 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.257483959 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.257616997 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.257626057 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.282898903 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.282967091 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.283250093 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.283250093 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.283251047 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.285351992 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.285439968 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.285535097 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.285639048 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.285675049 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.599046946 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.599092007 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.630520105 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.631251097 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.631361008 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.631932020 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.631989956 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.729604959 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.729870081 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.729919910 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.729943991 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.729984999 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.730036974 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.730061054 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.730074883 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.730082989 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.733479023 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.733571053 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.733675003 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.733845949 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.733880997 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.812160015 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.812693119 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.812707901 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.813303947 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.813308954 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.913263083 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.913786888 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.913810015 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.914371967 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.914377928 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.917532921 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.917690039 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.917747021 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.917984962 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.917996883 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.918030024 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.918035030 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.920756102 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.921116114 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.921159983 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.921196938 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.921246052 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.921308041 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.921417952 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.921430111 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.921683073 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.921691895 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.956226110 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.956785917 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.956830025 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:49.957451105 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:49.957468033 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.015292883 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.015494108 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.015594959 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.015625954 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.015625954 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.015641928 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.015650034 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.018605947 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.018688917 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.018783092 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.018914938 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.018934965 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.026318073 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.026359081 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.026401997 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.026500940 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.026500940 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.027002096 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.027002096 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.027035952 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.027054071 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.030164957 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.030210972 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.030292988 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.030436039 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.030452013 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.088269949 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.089638948 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.089742899 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.089802027 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.089831114 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.089845896 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.089853048 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.093208075 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.093250036 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.093336105 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.093512058 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.093524933 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.379371881 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.380115986 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.380167007 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.380739927 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.380754948 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.480235100 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.480580091 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.480640888 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.480676889 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.480695963 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.480710030 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.480715990 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.483633995 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.483689070 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.483777046 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.483992100 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.484004974 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.558825016 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.564385891 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.564419031 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.565052986 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.565058947 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.672506094 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.673064947 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.673098087 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.673623085 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.673629045 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.676084042 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.676894903 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.676954031 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.677546024 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.677558899 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.712903976 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.713646889 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.713802099 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.713807106 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.713872910 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.713929892 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.713978052 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.714015007 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.714030981 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.718508005 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.718542099 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.718605995 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.718745947 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.718753099 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.740123987 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.740514994 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.740521908 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.741075039 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.741079092 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.777204037 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.777436018 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.777508020 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.777561903 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.777561903 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.777614117 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.777638912 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.782140017 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.782185078 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.782244921 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.782515049 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.782530069 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.783344984 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.783536911 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.783644915 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.783709049 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.783709049 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.783957958 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.783957958 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.784002066 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.784033060 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.787234068 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.787348032 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.787429094 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.787558079 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.787604094 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.845897913 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.845984936 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.846023083 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.846235991 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.846256018 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.846268892 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.846275091 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.849467993 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.849498987 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:50.849689960 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.849689960 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:50.849714041 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.122486115 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.125471115 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.125540018 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.126266003 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.126317978 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.222557068 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.222953081 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.223018885 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.232745886 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.232784986 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.252506018 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.252561092 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.252619982 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.253199100 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.253221989 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.373727083 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.374311924 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.374339104 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.374888897 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.374893904 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.435890913 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.436491966 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.436563015 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.437063932 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.437083006 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.445926905 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.446412086 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.446461916 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.446871042 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.446881056 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.631618023 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.631715059 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.631786108 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632153034 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632153034 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632173061 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.632184029 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.632190943 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.632320881 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.632385969 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632435083 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632460117 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.632476091 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.632483006 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.633403063 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.633832932 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.633862019 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.634284019 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.634295940 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.635682106 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.635736942 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.635759115 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.635782957 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.635811090 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.635888100 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.635978937 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.635992050 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.636069059 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.636077881 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.726155996 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.726330996 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.726501942 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.726592064 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.726592064 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.726649046 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.726677895 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.729527950 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.729546070 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.729788065 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.729788065 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.729809999 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.733187914 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.733375072 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.733483076 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.733483076 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.735331059 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.735359907 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.735384941 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.735399008 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.735620022 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.735620022 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.735671043 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.899718046 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.900230885 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.900283098 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:51.900734901 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:51.900748014 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.002271891 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.002440929 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.002542019 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.002820015 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.002820015 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.002846003 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.002863884 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.005650043 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.005743027 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.006048918 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.006048918 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.006145000 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.276721954 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.277852058 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.277852058 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.277875900 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.277894020 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.289458036 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.290291071 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.290291071 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.290307045 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.290323973 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.375524998 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.375945091 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.376008987 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.376679897 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.376694918 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.379658937 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.379988909 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.381092072 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.381150007 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.381177902 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.381216049 CET	49909	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.381230116 CET	443	49909	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.385039091 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.385096073 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.385317087 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.385317087 CET	49913	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.385365009 CET	443	49913	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.393779993 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.394290924 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.394339085 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.394376040 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.394459009 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.394467115 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.394467115 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.394467115 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.395103931 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.395113945 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.395634890 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.395643950 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.397033930 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.397077084 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.397485018 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.397485018 CET	49914	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.397555113 CET	443	49914	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.475424051 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.475939989 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.476047039 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.476047039 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.476139069 CET	49911	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.476177931 CET	443	49911	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.478348970 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.478395939 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.478605986 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.478605986 CET	49915	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.478645086 CET	443	49915	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.498581886 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.498672009 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.498821020 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.498821020 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.498864889 CET	49910	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.498878956 CET	443	49910	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.500871897 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.500906944 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.501027107 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.501127958 CET	49916	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.501135111 CET	443	49916	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.645306110 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.645865917 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.645935059 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.646470070 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.646492004 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.694262028 CET	49908	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.694287062 CET	443	49908	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.744668007 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.744720936 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.744860888 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.744937897 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.745162010 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.745162010 CET	49912	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.745210886 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.745239973 CET	443	49912	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.748256922 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.748321056 CET	443	49917	13.107.246.45	192.168.2.4
Nov 20, 2024 03:52:52.748389959 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.748548031 CET	49917	443	192.168.2.4	13.107.246.45
Nov 20, 2024 03:52:52.748569012 CET	443	49917	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:51:33.258434057 CET	53	54494	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:34.230534077 CET	53	50008	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:34.902365923 CET	49813	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:34.903079987 CET	65348	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:34.915287971 CET	53	65348	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:34.916134119 CET	53	49813	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:36.898875952 CET	53301	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:36.899209023 CET	60251	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:36.905591965 CET	53	53301	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:36.905908108 CET	53	60251	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:38.136773109 CET	64926	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:38.136914968 CET	58115	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:38.158624887 CET	53	58115	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:38.911926031 CET	56454	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:38.912081003 CET	62009	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:39.810551882 CET	58259	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:39.810973883 CET	58210	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:39.850596905 CET	49296	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:39.851190090 CET	55279	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:51:39.875612020 CET	53	55279	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:50.032881021 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 03:51:51.236135960 CET	53	50973	1.1.1.1	192.168.2.4
Nov 20, 2024 03:51:56.521533012 CET	53	59755	1.1.1.1	192.168.2.4
Nov 20, 2024 03:52:10.156286955 CET	53	57870	1.1.1.1	192.168.2.4
Nov 20, 2024 03:52:32.702014923 CET	53	56830	1.1.1.1	192.168.2.4
Nov 20, 2024 03:52:32.905738115 CET	53	59877	1.1.1.1	192.168.2.4
Nov 20, 2024 03:52:40.261977911 CET	58413	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:52:40.262383938 CET	65352	53	192.168.2.4	1.1.1.1
Nov 20, 2024 03:52:40.269402981 CET	53	65352	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 03:51:39.846966028 CET	192.168.2.4	1.1.1.1	c273	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 03:51:34.902365923 CET	192.168.2.4	1.1.1.1	0x6ff6	Standard query (0)	coecy.aerolandresidence.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:34.903079987 CET	192.168.2.4	1.1.1.1	0x55e2	Standard query (0)	coecy.aerolandresidence.com	65	IN (0x0001)	false
Nov 20, 2024 03:51:36.898875952 CET	192.168.2.4	1.1.1.1	0xf5a6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:36.899209023 CET	192.168.2.4	1.1.1.1	0x67b2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 03:51:38.136773109 CET	192.168.2.4	1.1.1.1	0x825a	Standard query (0)	feeds.foxnews.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:38.136914968 CET	192.168.2.4	1.1.1.1	0x35ec	Standard query (0)	feeds.foxnews.com	65	IN (0x0001)	false
Nov 20, 2024 03:51:38.911926031 CET	192.168.2.4	1.1.1.1	0x9bfc	Standard query (0)	moxie.foxnews.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:38.912081003 CET	192.168.2.4	1.1.1.1	0x3bff	Standard query (0)	moxie.foxnews.com	65	IN (0x0001)	false
Nov 20, 2024 03:51:39.810551882 CET	192.168.2.4	1.1.1.1	0x4fdd	Standard query (0)	moxie.foxnews.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:39.810973883 CET	192.168.2.4	1.1.1.1	0x427f	Standard query (0)	moxie.foxnews.com	65	IN (0x0001)	false
Nov 20, 2024 03:51:39.850596905 CET	192.168.2.4	1.1.1.1	0xaafa	Standard query (0)	www.foxnews.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:39.851190090 CET	192.168.2.4	1.1.1.1	0xd5c0	Standard query (0)	www.foxnews.com	65	IN (0x0001)	false
Nov 20, 2024 03:52:40.261977911 CET	192.168.2.4	1.1.1.1	0x68d	Standard query (0)	www.foxnews.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:52:40.262383938 CET	192.168.2.4	1.1.1.1	0xf170	Standard query (0)	www.foxnews.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 03:51:34.916134119 CET	1.1.1.1	192.168.2.4	0x6ff6	No error (0)	coecy.aerolandresidence.com		185.246.86.14	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:36.905591965 CET	1.1.1.1	192.168.2.4	0xf5a6	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:51:36.905908108 CET	1.1.1.1	192.168.2.4	0x67b2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 03:51:38.146647930 CET	1.1.1.1	192.168.2.4	0x825a	No error (0)	feeds.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:38.158624887 CET	1.1.1.1	192.168.2.4	0x35ec	No error (0)	feeds.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:38.936364889 CET	1.1.1.1	192.168.2.4	0x9bfc	No error (0)	moxie.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:38.941935062 CET	1.1.1.1	192.168.2.4	0x3bff	No error (0)	moxie.foxnews.com	moxie.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:39.833873987 CET	1.1.1.1	192.168.2.4	0x4fdd	No error (0)	moxie.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:39.846873045 CET	1.1.1.1	192.168.2.4	0x427f	No error (0)	moxie.foxnews.com	moxie.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:39.857700109 CET	1.1.1.1	192.168.2.4	0xaafa	No error (0)	www.foxnews.com	www.foxnews.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:51:39.875612020 CET	1.1.1.1	192.168.2.4	0xd5c0	No error (0)	www.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:52:40.269402981 CET	1.1.1.1	192.168.2.4	0xf170	No error (0)	www.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 03:52:40.285016060 CET	1.1.1.1	192.168.2.4	0x68d	No error (0)	www.foxnews.com	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

coecy.aerolandresidence.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	185.246.86.14	80	1800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 03:51:34.941004992 CET	507	OUT	GET /4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:35.532457113 CET	708	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 9 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:47:44 GMT Content-Length: 458 Data Raw: 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 65 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 65 2e 70 61 74 68 6e 61 6d 65 3d 22 2f 74 22 2b 65 2e 70 61 74 68 6e 61 6d 65 3b 6c 65 74 20 6f 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 22 67 6f 6f 67 6c 65 62 6f 74 22 2c 22 62 69 6e 67 62 6f 74 22 2c 22 79 61 6e 64 65 78 62 6f 74 22 2c 22 64 75 63 6b 64 75 63 6b 62 6f 74 22 2c 22 73 6c 75 72 70 22 2c 22 62 61 69 64 75 73 70 69 64 65 72 22 2c 22 66 61 63 65 62 6f 74 22 2c 22 69 61 5f 61 72 63 68 69 76 65 72 22 5d 2c 74 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 30 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 2e 69 6e 64 65 78 4f 66 28 6f 5b 6e 5d 29 3e 2d 31 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 73 65 74 54 [TRUNCATED] Data Ascii: <script>let e=new URL(window.location.href);e.pathname="/t"+e.pathname;let o=e.toString();navigator.cookieEnabled&&!function(e){for(var o=["googlebot","bingbot","yandexbot","duckduckbot","slurp","baiduspider","facebot","ia_archiver"],t=e.toLowerCase(),n=0;n<o.length;n++)if(t.indexOf(o[n])>-1)return!0;return!1}(navigator.userAgent)?setTimeout((function(){document.location.href=o}),1e3):console.log("bt");</script><p style="color:gray;">redirect...</p>
Nov 20, 2024 03:51:35.598445892 CET	463	OUT	GET /favicon.ico HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:35.774002075 CET	256	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 8 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:47:44 GMT Content-Length: 0
Nov 20, 2024 03:51:36.589554071 CET	620	OUT	GET /t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:36.861435890 CET	460	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 7 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:47:45 GMT Content-Length: 210 Data Raw: 3c 73 63 72 69 70 74 3e 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 2f 6e 65 77 73 3f 71 3d 49 50 20 70 72 6f 76 69 64 65 72 20 69 73 20 62 6c 61 63 6b 6c 69 73 74 65 64 21 20 4c 45 56 45 4c 33 27 3b 20 0a 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 6e 65 77 73 3f 71 3d 49 50 20 70 72 6f 76 69 64 65 72 20 69 73 20 62 6c 61 63 6b 6c 69 73 74 65 64 21 20 4c 45 56 45 4c 33 27 29 3b 0a 7d 2c 20 31 30 30 30 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 3e 3c 2f 70 3e 0a Data Ascii: <script>setTimeout(function(){ window.location.href = '/news?q=IP provider is blacklisted! LEVEL3'; console.log('redirecting to /news?q=IP provider is blacklisted! LEVEL3');}, 1000);</script><p></p>
Nov 20, 2024 03:51:37.931837082 CET	604	OUT	GET /news?q=IP%20provider%20is%20blacklisted!%20LEVEL3 HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:38.107728004 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 6 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:47:46 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - mrsbagbag.com </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none; }
Nov 20, 2024 03:51:38.107784033 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 2e 6e 65 77 73 2d 69 74 65 6d 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 Data Ascii: .news-item a:hover { text-decoration: underline; } .news-item p { font-size: 1rem; margin-bottom: 0; } </style></head><body><div class="container"> <h1>Fox News W
Nov 20, 2024 03:51:38.107821941 CET	996	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 75 69 64 20 3d 20 67 75 69 64 45 6c 65 6d 65 6e 74 20 3f 20 67 75 69 64 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3a 20 22 23 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: const guid = guidElement ? guidElement.textContent : "#"; const description = descriptionElement ? descriptionElement.textContent : "No description available."; const content = contentElement ? contentElemen
Nov 20, 2024 03:51:56.087285042 CET	537	OUT	GET / HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/news?q=IP%20provider%20is%20blacklisted!%20LEVEL3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:56.263391018 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 5 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:48:04 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 68 31 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 43 6f 6d 69 6e 67 20 53 6f 6f 6e 21 3c [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - mrsbagbag.com</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label> </div> </div> <form id="subs
Nov 20, 2024 03:51:56.263430119 CET	224	IN	Data Raw: 63 72 69 70 74 69 6f 6e 2d 66 6f 72 6d 22 20 6f 6e 73 75 62 6d 69 74 3d 22 73 75 62 6d 69 74 46 6f 72 6d 28 65 76 65 6e 74 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c Data Ascii: cription-form" onsubmit="submitForm(event)"> <input type="email" id="email" placeholder="Enter your email" required> <button type="submit">Subscribe</button> <p id="subscription-message"></p> </fo
Nov 20, 2024 03:51:56.263464928 CET	1236	IN	Data Raw: 72 6d 3e 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 6e 65 77 73 22 3e 46 6f 78 20 4e 65 77 73 3c 2f 61 3e 0a 20 20 20 20 3c 62 72 3e 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 61 62 6f 75 74 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 Data Ascii: rm> <a href="news">Fox News</a> <br> <a href="about">Learn more about our email marketing agency</a> <br> <a href="opt-out">Unsubscribe from our newsletter</a> <br> <a href="privacy">Privacy Policy</a></div><
Nov 20, 2024 03:51:56.263499022 CET	454	IN	Data Raw: 6e 67 28 29 2e 70 61 64 53 74 61 72 74 28 32 2c 20 27 30 27 29 3b 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 73 65 63 6f 6e 64 73 2e 74 6f 53 74 72 69 6e 67 28 29 2e 70 61 64 Data Ascii: ng().padStart(2, '0'); secondsElement.textContent = seconds.toString().padStart(2, '0'); } function submitForm(event) { event.preventDefault(); const email = document.getElementById('email').value;
Nov 20, 2024 03:51:56.287996054 CET	358	OUT	GET /assets/styles.css HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://coecy.aerolandresidence.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:51:56.463713884 CET	1236	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1435 Content-Type: text/css; charset=utf-8 Last-Modified: Tue, 12 Nov 2024 17:50:03 GMT Date: Wed, 20 Nov 2024 02:48:05 GMT Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 34 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 [TRUNCATED] Data Ascii: body { font-family: Arial, sans-serif; background-color: #f0f0f0; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; padding: 0;}.container { background-color: #ffffff; padding: 30px; border-radius: 10px; box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1); text-align: center;}h1 { font-size: 36px; margin-bottom: 20px; color: #333;}p { font-size: 18px; color: #777; margin-bottom: 40px;}.countdown { display: flex; justify-content: center; margin-bottom: 40px;}.countdown-item { display: inline-block; margin: 0 10px;}.countdown-item span { font-size: 24px; color: #444;}.countdown-item label { display: block; font-size: 14px; color: #999;}form { display: flex; justify-content: center; align-items: center; flex-direction: column;}input[type="email"] { font-size: 16px; padding: 10px; border: 1px solid #ccc; [TRUNCATED]
Nov 20, 2024 03:51:56.463753939 CET	384	IN	Data Raw: 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 Data Ascii: max-width: 300px; margin-bottom: 20px;}button { font-size: 16px; padding: 10px 20px; background-color: #333; color: #fff; border: none; border-radius: 5px; cursor: pointer; transition: background-color
Nov 20, 2024 03:52:06.970539093 CET	493	OUT	GET /about HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:52:07.146409988 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 4 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:48:15 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 62 6f 75 74 20 55 73 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 61 62 6f 75 74 5f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 3c 68 31 3e 41 62 6f 75 74 20 [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>About Us - mrsbagbag.com</title> <link rel="stylesheet" href="/assets/about_styles.css"></head><body><div class="container"> <h1>About Our Email Marketing Agency</h1> <p>Our email marketing agency specializes in creating effective and engaging email campaigns tailored to meet the unique needs of businesses of all sizes. With a team of experienced marketing professionals, we are dedicated to helping our clients achieve their marketing goals and drive growth through the power of email marketing.</p> <p>At our agency, we understand the importance of personalized, targeted email marketing strategies. By combining cutting-edge technology with data-driven insights and creative expertise, we deliver email campaigns that resonate with your audience, foster custome
Nov 20, 2024 03:52:07.146466017 CET	1212	IN	Data Raw: 72 20 6c 6f 79 61 6c 74 79 2c 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 63 6f 6e 76 65 72 73 69 6f 6e 73 2e 20 46 72 6f 6d 20 64 65 73 69 67 6e 69 6e 67 20 63 61 70 74 69 76 61 74 69 6e 67 20 65 6d 61 69 6c 20 74 65 6d 70 6c 61 74 65 73 20 74 6f Data Ascii: r loyalty, and increase conversions. From designing captivating email templates to crafting compelling subject lines, our comprehensive services cover every aspect of email marketing.</p> <p>Our services include:</p> <ul> <l
Nov 20, 2024 03:52:07.159893036 CET	369	OUT	GET /assets/about_styles.css HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://coecy.aerolandresidence.com/about Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:52:07.335433960 CET	898	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 714 Content-Type: text/css; charset=utf-8 Last-Modified: Tue, 12 Nov 2024 17:50:03 GMT Date: Wed, 20 Nov 2024 02:48:16 GMT Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 66 30 66 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 72 65 6d 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 72 65 6d 3b 0a 20 [TRUNCATED] Data Ascii: body { font-family: Arial, sans-serif; background-color: #f0f0f0; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; padding: 0;}.container { width: 80%; margin: auto; overflow: hidden; padding: 0 2rem; background-color: #fff; padding: 2rem; border-radius: 5px; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24);}h1 { font-size: 2rem; color: #333; margin-bottom: 1rem;}p { font-size: 1rem; color: #333; margin-bottom: 1rem;}ul { font-size: 1rem; color: #333; margin-bottom: 1rem; padding-left: 1.5rem;}li { margin-bottom: 0.5rem;}
Nov 20, 2024 03:52:18.971426010 CET	493	OUT	GET / HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/about Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:52:19.147078991 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 3 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:48:27 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 68 31 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 43 6f 6d 69 6e 67 20 53 6f 6f 6e 21 3c [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - mrsbagbag.com</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label> </div> </div> <form id="subs
Nov 20, 2024 03:52:19.147118092 CET	224	IN	Data Raw: 63 72 69 70 74 69 6f 6e 2d 66 6f 72 6d 22 20 6f 6e 73 75 62 6d 69 74 3d 22 73 75 62 6d 69 74 46 6f 72 6d 28 65 76 65 6e 74 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c Data Ascii: cription-form" onsubmit="submitForm(event)"> <input type="email" id="email" placeholder="Enter your email" required> <button type="submit">Subscribe</button> <p id="subscription-message"></p> </fo
Nov 20, 2024 03:52:19.147214890 CET	1236	IN	Data Raw: 72 6d 3e 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 6e 65 77 73 22 3e 46 6f 78 20 4e 65 77 73 3c 2f 61 3e 0a 20 20 20 20 3c 62 72 3e 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 61 62 6f 75 74 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 Data Ascii: rm> <a href="news">Fox News</a> <br> <a href="about">Learn more about our email marketing agency</a> <br> <a href="opt-out">Unsubscribe from our newsletter</a> <br> <a href="privacy">Privacy Policy</a></div><
Nov 20, 2024 03:52:19.147248983 CET	454	IN	Data Raw: 6e 67 28 29 2e 70 61 64 53 74 61 72 74 28 32 2c 20 27 30 27 29 3b 0a 20 20 20 20 20 20 20 20 73 65 63 6f 6e 64 73 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 73 65 63 6f 6e 64 73 2e 74 6f 53 74 72 69 6e 67 28 29 2e 70 61 64 Data Ascii: ng().padStart(2, '0'); secondsElement.textContent = seconds.toString().padStart(2, '0'); } function submitForm(event) { event.preventDefault(); const email = document.getElementById('email').value;
Nov 20, 2024 03:52:30.251267910 CET	492	OUT	GET /news HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:52:30.428003073 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 2 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:48:39 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 78 20 4e 65 77 73 20 57 6f 72 6c 64 20 52 53 53 20 46 65 65 64 20 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Fox News World RSS Feed - mrsbagbag.com </title> <style> body { font-family: Arial, sans-serif; background-color: #f4f6f9; color: #333; margin: 0; padding: 0; } .container { width: 80%; margin: 0 auto; } h1 { font-size: 2rem; margin: 2rem 0; } .news-item { background-color: white; padding: 1.5rem; margin-bottom: 1rem; box-shadow: 0 1px 3px rgba(0, 0, 0, 0.12), 0 1px 2px rgba(0, 0, 0, 0.24); } .news-item h2 { font-size: 1.5rem; margin-bottom: 1rem; } .news-item a { color: #1a73e8; text-decoration: none; }
Nov 20, 2024 03:52:42.051167965 CET	492	OUT	GET / HTTP/1.1 Host: coecy.aerolandresidence.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://coecy.aerolandresidence.com/news Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Nov 20, 2024 03:52:42.226758957 CET	1236	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Address: gin_throttle_mw_360000000000_8.46.123.75 X-Ratelimit-Limit: 10 X-Ratelimit-Remaining: 1 X-Ratelimit-Reset: 1732074464 Date: Wed, 20 Nov 2024 02:48:50 GMT Transfer-Encoding: chunked Data Raw: 38 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 69 6e 67 20 53 6f 6f 6e 20 2d 20 6d 72 73 62 61 67 62 61 67 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 3c 68 31 3e 4f 75 72 20 57 65 62 73 69 74 65 20 69 73 20 43 6f 6d 69 6e 67 20 53 6f 6f 6e 21 3c [TRUNCATED] Data Ascii: 800<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Coming Soon - mrsbagbag.com</title> <link rel="stylesheet" href="/assets/styles.css"></head><body><div class="container"> <h1>Our Website is Coming Soon!</h1> <p>We are working hard to give you the best experience. Stay tuned!</p> <div class="countdown"> <div class="countdown-item"> <span id="days">00</span> <label>Days</label> </div> <div class="countdown-item"> <span id="hours">00</span> <label>Hours</label> </div> <div class="countdown-item"> <span id="minutes">00</span> <label>Minutes</label> </div> <div class="countdown-item"> <span id="seconds">00</span> <label>Seconds</label> </div> </div> <form id="subs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	185.246.86.14	80	1800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 03:52:19.927913904 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:51:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:51:39 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=50025 Date: Wed, 20 Nov 2024 02:51:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:51:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:51:40 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=49985 Date: Wed, 20 Nov 2024 02:51:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 02:51:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:51:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uzFLDSD7CSmfUDU&MD=wymFcDuO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:51:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: cb406fbd-51ec-4aa4-8edc-a4801a866381 MS-RequestId: 0d4cece2-2a4b-4d76-88d9-195bdb29b92b MS-CV: Wcpo2MP32ESP8TTm.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:51:46 GMT Connection: close Content-Length: 24490
2024-11-20 02:51:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 02:51:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:25 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uzFLDSD7CSmfUDU&MD=wymFcDuO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:52:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f4934acc-ba88-4714-93f0-810e3b309885 MS-RequestId: b5a85a96-0bde-4ad1-a462-58fb80e18b3f MS-CV: ljYRnUAJe0mYxffv.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:52:24 GMT Connection: close Content-Length: 30005
2024-11-20 02:52:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 02:52:25 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:27 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:27 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:27 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025227Z-r1d97b9957744xz5hC1TEB5bf80000000870000000002vxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:27 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 02:52:27 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:28 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d9470d89-501e-0047-17f3-3ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025228Z-185f5d8b95c9mqtvhC1NYCghtc00000009r000000000aadz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:28 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:28 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:28 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:28 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025228Z-1777c6cb754wcxkwhC1TEB3c6w000000090g0000000008ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:28 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025228Z-r1d97b99577ckpmjhC1TEBrzs0000000087g00000000h98f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:28 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025228Z-185f5d8b95csd4bwhC1NYCq7dc00000009h000000000fqt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:28 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:28 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025228Z-185f5d8b95cmd8vfhC1NYC0g4000000005m00000000043f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:29 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025229Z-1777c6cb7544n7p6hC1TEByvb4000000090g00000000rkdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:29 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025229Z-185f5d8b95cx9g8lhC1NYCtgvc00000001y000000000mm7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:29 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:29 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:29 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8e3f512-601e-003d-2af7-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025229Z-r1d97b99577n4dznhC1TEBc1qw000000087000000000gtx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:52:29 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:29 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:29 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025229Z-1777c6cb754ww792hC1TEBzqu400000008tg00000000ga7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:29 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025229Z-r1d97b99577tssmjhC1TEB8kan000000084g00000000bd46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:30 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025230Z-1777c6cb754xjpthhC1TEBexs800000008t000000000m0uw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:30 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025230Z-185f5d8b95c96jn4hC1NYCbgp800000009ng00000000c0wk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:30 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025230Z-185f5d8b95c4vwv8hC1NYCy4v400000009n000000000wtda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:30 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025230Z-185f5d8b95cjbkr4hC1NYCeu2400000009eg00000000hdzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-185f5d8b95cf7qddhC1NYC66an00000009r00000000098ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-185f5d8b95crwqd8hC1NYCps6800000009hg00000000pk7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0bcc5563-701e-0021-03f3-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g000000009hmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-r1d97b99577gg97qhC1TEBcrf400000007zg00000000mwen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-185f5d8b95c96jn4hC1NYCbgp800000009pg000000007zfh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-1777c6cb754wcxkwhC1TEB3c6w00000008v000000000mwkm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-185f5d8b95c4vwv8hC1NYCy4v400000009ng00000000vcfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025231Z-1777c6cb754xlpjshC1TEBv8cc000000092000000000m4ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:32 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025232Z-185f5d8b95c5lcmhhC1NYCsnsw00000009m000000000xrst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:32 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:32 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025232Z-r1d97b99577dd2gchC1TEBz5ys000000084g000000005dbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025232Z-185f5d8b95cqnkdjhC1NYCm8w800000009c000000000v5qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:32 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025232Z-185f5d8b95cdh56ghC1NYCk1x400000003b000000000vdx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025233Z-185f5d8b95c68cvnhC1NYCfn7s00000009m000000000k5sr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025233Z-1777c6cb754vxwc9hC1TEBykgw00000008xg00000000k94w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:33 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025233Z-1777c6cb754gc8g6hC1TEB966c000000091g000000004e2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:33 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025233Z-185f5d8b95ctl8xlhC1NYCn94g00000009q000000000gsn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025233Z-185f5d8b95c9mqtvhC1NYCghtc00000009t000000000292f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:33 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-185f5d8b95cf7qddhC1NYC66an00000009q000000000d6mx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-r1d97b99577tssmjhC1TEB8kan000000082g00000000g8ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-1777c6cb7542p5p4hC1TEBq09800000008wg00000000pyup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-185f5d8b95cdh56ghC1NYCk1x400000003eg00000000fk3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-185f5d8b95c9mqtvhC1NYCghtc00000009mg00000000rvgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-185f5d8b95cmd8vfhC1NYC0g4000000005g000000000eu65 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:34 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025234Z-185f5d8b95crl6swhC1NYC3ueg00000009sg00000000eu58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-r1d97b99577lxltfhC1TEByw2s00000008b000000000658q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-185f5d8b95cdh56ghC1NYCk1x400000003fg00000000b1mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-r1d97b99577lxltfhC1TEByw2s00000008bg000000004m59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-185f5d8b95cgrrn8hC1NYCgwh400000009h0000000007wvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-r1d97b99577ndm4rhC1TEBf0ps000000089000000000k0y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-185f5d8b95cgrrn8hC1NYCgwh400000009cg00000000uddb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-185f5d8b95c4bhwphC1NYCs8gw00000009rg00000000k2t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025235Z-1777c6cb754ww792hC1TEBzqu400000008rg00000000qbxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:36 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025236Z-r1d97b9957744xz5hC1TEB5bf8000000081g00000000m62c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:36 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025236Z-1777c6cb754xrr98hC1TEB3kag00000008y0000000001835 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025236Z-1777c6cb754gc8g6hC1TEB966c00000008v000000000u2fa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025236Z-185f5d8b95c4vwv8hC1NYCy4v400000009tg00000000b14c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:36 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025236Z-185f5d8b95c4bhwphC1NYCs8gw00000009u00000000077kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-1777c6cb754lv4cqhC1TEB13us00000008wg00000000pmbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-185f5d8b95cdtclvhC1NYC4rmc00000009pg00000000uwp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-185f5d8b95cdcwrthC1NYCy5b800000009pg000000005mf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49813	13.107.246.45	443	1800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-185f5d8b95c5lcmhhC1NYCsnsw00000009n000000000s52r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ccd0155-401e-0015-24f2-3a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-r1d97b99577d6qrbhC1TEBux5s00000008b000000000fcr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-185f5d8b95c4bhwphC1NYCs8gw00000009q000000000rutr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025237Z-185f5d8b95c5lcmhhC1NYCsnsw00000009sg000000004qhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-1777c6cb754wcxkwhC1TEB3c6w00000008wg00000000et1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-185f5d8b95cdcwrthC1NYCy5b800000009qg000000001d1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-185f5d8b95cdtclvhC1NYC4rmc00000009pg00000000uwqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-185f5d8b95cmd8vfhC1NYC0g4000000005eg00000000pxh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-185f5d8b95cdcwrthC1NYCy5b800000009kg00000000fn7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-185f5d8b95cqnkdjhC1NYCm8w800000009eg00000000h3pf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025238Z-r1d97b99577jlrkbhC1TEBq8d0000000084g00000000b3da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:38 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-185f5d8b95crwqd8hC1NYCps6800000009pg000000007erd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:39 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-185f5d8b95cwtv72hC1NYC141w00000009d0000000011yx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:39 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-r1d97b99577l6wbzhC1TEB3fwn00000008bg00000000aydm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-1777c6cb754mqztshC1TEB4mkc0000000930000000004rrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-185f5d8b95crl6swhC1NYC3ueg00000009pg00000000vfk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:39 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025239Z-r1d97b99577gg97qhC1TEBcrf400000007yg00000000r0sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025240Z-r1d97b99577n5jhbhC1TEB74vn00000008a0000000002p2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:40 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025240Z-1777c6cb754vxwc9hC1TEBykgw000000092g000000001mka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:40 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:40 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025240Z-1777c6cb7549x5qchC1TEBggbg00000008zg00000000k2sh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:40 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:40 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025240Z-r1d97b99577hsvhhhC1TEByb1w00000002p00000000001pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:40 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:40 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:40 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025240Z-185f5d8b95ckwnflhC1NYCx9qs00000009rg000000007f9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:40 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-185f5d8b95c4hl5whC1NYCeex000000009kg00000000a5xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-r1d97b9957747b9jhC1TEBgyec000000088g00000000nqx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-185f5d8b95cp7lkfhC1NYC7rpw00000009r000000000kymb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-1777c6cb754mrj2shC1TEB6k7w000000094000000000bbrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-185f5d8b95ctl8xlhC1NYCn94g00000009rg000000009zm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-185f5d8b95c4hl5whC1NYCeex000000009ng000000001bxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025241Z-1777c6cb754xrr98hC1TEB3kag00000008xg000000002nyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-r1d97b99577tssmjhC1TEB8kan000000081000000000kuut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-185f5d8b95c4bhwphC1NYCs8gw00000009q000000000rv0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1741ed2c-701e-0053-1ff7-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-r1d97b99577656nchC1TEBk98c000000088g00000000ddfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-185f5d8b95crl6swhC1NYC3ueg00000009vg000000001gp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-1777c6cb7544nvmshC1TEBf7qc00000008q000000000sx9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-185f5d8b95c95vpshC1NYC759c00000009mg00000000ft8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-185f5d8b95c68cvnhC1NYCfn7s00000009k000000000r4ag x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025242Z-r1d97b9957789nh9hC1TEBxha800000008fg000000001epd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:43 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025243Z-185f5d8b95csp6jmhC1NYCwy6s00000009eg00000000ycya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:43 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025243Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g000000009k8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:43 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:43 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025243Z-185f5d8b95c68cvnhC1NYCfn7s00000009n000000000cugc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:43 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:43 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025243Z-1777c6cb754vxwc9hC1TEBykgw000000090g0000000089ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025243Z-185f5d8b95crl6swhC1NYC3ueg00000009pg00000000vftf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025244Z-1777c6cb754g9zd5hC1TEBfvpw000000094000000000bvne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025244Z-r1d97b99577d6qrbhC1TEBux5s000000089g00000000nxqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025244Z-185f5d8b95c96jn4hC1NYCbgp800000009hg00000000snm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025244Z-1777c6cb7542p5p4hC1TEBq09800000008vg00000000rnhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025244Z-185f5d8b95cwtv72hC1NYC141w00000009dg00000000wh50 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:44 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-r1d97b99577kk29chC1TEBemmg000000087g00000000h3yx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-185f5d8b95c5lcmhhC1NYCsnsw00000009k000000000zbdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-1777c6cb754j8gqphC1TEB5bf800000008t000000000s8c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-185f5d8b95c9mqtvhC1NYCghtc00000009pg00000000kktn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-r1d97b99577ndm4rhC1TEBf0ps00000008a000000000g7bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-1777c6cb7544n7p6hC1TEByvb4000000092000000000kds8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-r1d97b99577dd2gchC1TEBz5ys00000007yg00000000q36w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-r1d97b99577dd2gchC1TEBz5ys00000007z000000000q40b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:45 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025245Z-1777c6cb7542p5p4hC1TEBq09800000009000000000097v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-185f5d8b95csp6jmhC1NYCwy6s00000009hg00000000gwu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-185f5d8b95ctl8xlhC1NYCn94g00000009sg000000005kys x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-185f5d8b95c68cvnhC1NYCfn7s00000009q0000000005h3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-r1d97b99577d6qrbhC1TEBux5s00000008eg0000000034yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-185f5d8b95csd4bwhC1NYCq7dc00000009ng0000000027ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:46 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025246Z-185f5d8b95cgrrn8hC1NYCgwh400000009m00000000001qc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:47 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025247Z-185f5d8b95ckwnflhC1NYCx9qs00000009q000000000enrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:47 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025247Z-r1d97b99577ckpmjhC1TEBrzs0000000087000000000htw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:47 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:47 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025247Z-1777c6cb754gvvgfhC1TEBz4rg000000092g00000000a7g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:47 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025247Z-1777c6cb754dqf99hC1TEB5nps00000008u000000000dq5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:47 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:47 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:47 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025247Z-1777c6cb754rz2pghC1TEBghen00000008wg00000000bvc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:47 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-r1d97b99577gg97qhC1TEBcrf4000000082g00000000bmge x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-185f5d8b95cf7qddhC1NYC66an00000009mg00000000saue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-185f5d8b95c4vwv8hC1NYCy4v400000009p000000000ssm2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-185f5d8b95c4hl5whC1NYCeex000000009k000000000bhak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-1777c6cb754dqf99hC1TEB5nps00000008ug00000000da16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:48 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:48 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025248Z-1777c6cb754xlpjshC1TEBv8cc000000092g00000000hvvm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:48 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-r1d97b99577656nchC1TEBk98c000000089000000000c0tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-185f5d8b95cdh56ghC1NYCk1x400000003gg0000000082g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-1777c6cb754lvj6mhC1TEBke94000000090g00000000hmc5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-r1d97b99577jlrkbhC1TEBq8d0000000082000000000gv14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-1777c6cb7544n7p6hC1TEByvb4000000095g0000000077u3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-1777c6cb754dqf99hC1TEB5nps00000008v000000000bb1t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:49 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-185f5d8b95crwqd8hC1NYCps6800000009ng00000000aq8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:49 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025249Z-r1d97b995774n5h6hC1TEBvf8400000008ag00000000139m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:49 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-185f5d8b95c96jn4hC1NYCbgp800000009ng00000000c25f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:50 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e99758fe-d01e-0065-348c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-185f5d8b95c5lcmhhC1NYCsnsw00000009tg000000000h17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:50 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 17749f92-a01e-006f-3cf7-3a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-r1d97b9957789nh9hC1TEBxha800000008c000000000arkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:50 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f2376ea7-e01e-000c-078c-3a8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-185f5d8b95csp6jmhC1NYCwy6s00000009ng00000000740b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:50 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 1ebeca68-b01e-0002-5b8c-3a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-185f5d8b95cmd8vfhC1NYC0g4000000005g000000000ev9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:50 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:50 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 270c322f-601e-00ab-4d8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025250Z-1777c6cb754dqf99hC1TEB5nps00000008qg00000000skxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:50 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:51 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:51 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:51 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: c9276c1c-a01e-000d-508c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025251Z-r1d97b99577hsvhhhC1TEByb1w00000002dg00000000mm7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:51 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:51 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:51 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:51 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 082f2b53-301e-005d-228c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025251Z-r1d97b99577gg97qhC1TEBcrf4000000081000000000gc76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:51 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:51 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:51 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 04da812a-201e-006e-55ee-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025251Z-185f5d8b95cqnkdjhC1NYCm8w800000009h0000000006z7u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:52:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:52:51 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:52:51 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:52:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 107b574b-c01e-00a2-0a8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T025251Z-r1d97b99577kk29chC1TEBemmg000000089g00000000bhbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:52:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1228, Parent PID: 1456

General

Target ID:	0
Start time:	21:51:28
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1800, Parent PID: 1228

General

Target ID:	1
Start time:	21:51:31
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2180,i,3917518086774542599,8825394850173494803,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6312, Parent PID: 1456

General

Target ID:	3
Start time:	21:51:34
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/news?q=IP%20provider%20is%20blacklisted!%20LEVEL3	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/news?q=IP%20provider%20is%20blacklisted!%20LEVEL3	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/about	HTTP Parser: No favicon
Source: http://coecy.aerolandresidence.com/news	HTTP Parser: No favicon

Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="author".. found

Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found
Source: http://coecy.aerolandresidence.com/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uzFLDSD7CSmfUDU&MD=wymFcDuO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=uzFLDSD7CSmfUDU&MD=wymFcDuO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13 HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /news?q=IP%20provider%20is%20blacklisted!%20LEVEL3 HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/t/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/news?q=IP%20provider%20is%20blacklisted!%20LEVEL3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/styles.css HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://coecy.aerolandresidence.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/about_styles.css HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://coecy.aerolandresidence.com/aboutAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/aboutAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /news HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: coecy.aerolandresidence.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://coecy.aerolandresidence.com/newsAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: coecy.aerolandresidence.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: feeds.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: moxie.foxnews.com
Source: global traffic	DNS traffic detected: DNS query: www.foxnews.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: <content:encoded><p>A month after the body of a Walmart employee was found inside a walk-in oven of a store in <a href="https://www.foxnews.com/category/world/world-regions/canada" target="_blank" rel="noopener">eastern Canada,</a> police have determined that her death was not suspicious.</p><p><a href="https://www.foxnews.com/category/us/crime/police-and-law-enforcement" target="_blank" rel="noopener">The Halifax Police Department</a> released a statement to announce that an investigation into the death of the 19-year-old woman, who was found inside the walk-in oven of the Halifax Walmart on Oct. 19, was not suspicious and there was no evidence of foul play.</p><p>"We do not believe anyone else was involved in the circumstances surrounding the woman's death," Halifax Regional Police Constable Martin Cromwell announced in a video update on the department's Facebook page on Monday.</p><p>Cromwell added that they did not have many details they could share and did not expect any other updates anytime soon. equals www.facebook.com (Facebook)
Source: chromecache_50.1.dr, chromecache_49.1.dr	String found in binary or memory: <rss xmlns:media="http://search.yahoo.com/mrss/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"> equals www.yahoo.com (Yahoo)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1228, Parent PID: 1456

Windows Analysis Report
http://coecy.aerolandresidence.com/4dEHMA18256MohB1582dhfmzbxjmr14569YPBKKVBWHHELHEC1707MKGL20100J13