Edit tour

Windows Analysis Report
https://www.luigimarzo.it/wp-admin/css/anti.php

Overview

General Information

Sample URL:	https://www.luigimarzo.it/wp-admin/css/anti.php
Analysis ID:	1559087
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1968,i,3258528612734125222,8217063919986605666,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.luigimarzo.it/wp-admin/css/anti.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /wp-admin/css/anti.php HTTP/1.1Host: www.luigimarzo.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.luigimarzo.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.luigimarzo.it/wp-admin/css/anti.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rFlN+E+E1fcG+en&MD=xfmbMTlb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/cropped-LOGO-32x32.png HTTP/1.1Host: www.luigimarzo.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.luigimarzo.it/wp-admin/css/anti.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/02/cropped-LOGO-32x32.png HTTP/1.1Host: www.luigimarzo.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rFlN+E+E1fcG+en&MD=xfmbMTlb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.luigimarzo.it
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/3@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1968,i,3258528612734125222,8217063919986605666,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.luigimarzo.it/wp-admin/css/anti.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1968,i,3258528612734125222,8217063919986605666,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://www.luigimarzo.it/wp-admin/css/anti.php	2%	Virustotal		Browse
https://www.luigimarzo.it/wp-admin/css/anti.php	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
www.luigimarzo.it	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://www.luigimarzo.it/wp-content/uploads/2022/02/cropped-LOGO-32x32.png	0%	Avira URL Cloud	safe
https://www.luigimarzo.it/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	216.58.212.164	true	false		high
www.luigimarzo.it	89.46.106.37	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.luigimarzo.it/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.luigimarzo.it/wp-admin/css/anti.php	false		unknown
https://www.luigimarzo.it/wp-content/uploads/2022/02/cropped-LOGO-32x32.png	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
89.46.106.37	www.luigimarzo.it	Italy	31034	ARUBA-ASNIT	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559087
Start date and time:	2024-11-20 07:36:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.luigimarzo.it/wp-admin/css/anti.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/3@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.184.238, 108.177.15.84, 34.104.35.123, 93.184.221.240, 192.229.221.95, 172.217.16.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3026
Entropy (8bit):	7.888268621756589
Encrypted:	false
SSDEEP:	48:201iqYj0FFdYtNjXMD3i2H11wI8uNhU/5qUJpQqLfpVlzQTv6MUaOXoSaos4:20dVqtNc+2H14ukqU1LfpVKTvATo5+
MD5:	098DB92FFEC8A2807DD1CC4DE46B60CF
SHA1:	620DBA03094F243AE398FFD01DC5ED0978822C6F
SHA-256:	9F2E931317C03006FE5F08905B099538CD648F8C90EFB72404A6767BAD548DD7
SHA-512:	B1B747A596C409E1A8934FDF22717092CAE036AFAA95EA1C22FA4AD5873988C7CE6802928ABC88E6043F26CF9262F26A8E3372FE4D1522B0766A5EACD35A85F2
Malicious:	false
Reputation:	low
URL:	https://www.luigimarzo.it/wp-content/uploads/2022/02/cropped-LOGO-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+......IDATX...kl....k.;.f...N/..L...w.....E...1../9.=..91...?.r>y9.J.....%..I....X....)..-.....w.y.....=..>g}{.ge..k=....G..X....>}...Jm.u}.R.%......Re..G.V._m6......o...G..t..{.W^y..4....k:.n.B..^...D.....n.R.....F...%.N.+..]..wUUU.n.Z.o......].{..F.{....UUU..7...FMM.B.....r....`.p8.a....r....;G<..t.....i.m..-......x.......<00......>.x.......<y..?....2...o..&.~.-.\|...F..:D"...;.`..X.V..7.G..5W.\.....nooW....8~..<s.........-j.g.\|..'.x<\.p......G&.......j....u...JEE.G..e...:u...z.W_}Us..w...t~...w_.tI....'Nl....sss.}.....D.P ..f...-Z.......!....b~~...7SUUE"......Ass3{..!....\...........v..U.L&.....3.<C6.%..a...T.....[..j....i.[.l.4Mfgg1M...r._.R..............v.CCCC.O.>..W.^\|.E....^...s.N......:.i.(.........q.\X.V....P.P(...P( .......Q$ ...s\.t.].v..j=u../....H@...t:...;vH]....$.L..B)...0.t...z.N'.\|.].1..-[.PVVF&.!..RWW.....\|.......&>..#.v;[.n.R..SV...@.......%...[ZZ8z.(.L.....R.X,F4.....p8..i

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3026
Entropy (8bit):	7.888268621756589
Encrypted:	false
SSDEEP:	48:201iqYj0FFdYtNjXMD3i2H11wI8uNhU/5qUJpQqLfpVlzQTv6MUaOXoSaos4:20dVqtNc+2H14ukqU1LfpVKTvATo5+
MD5:	098DB92FFEC8A2807DD1CC4DE46B60CF
SHA1:	620DBA03094F243AE398FFD01DC5ED0978822C6F
SHA-256:	9F2E931317C03006FE5F08905B099538CD648F8C90EFB72404A6767BAD548DD7
SHA-512:	B1B747A596C409E1A8934FDF22717092CAE036AFAA95EA1C22FA4AD5873988C7CE6802928ABC88E6043F26CF9262F26A8E3372FE4D1522B0766A5EACD35A85F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........+......IDATX...kl....k.;.f...N/..L...w.....E...1../9.=..91...?.r>y9.J.....%..I....X....)..-.....w.y.....=..>g}{.ge..k=....G..X....>}...Jm.u}.R.%......Re..G.V._m6......o...G..t..{.W^y..4....k:.n.B..^...D.....n.R.....F...%.N.+..]..wUUU.n.Z.o......].{..F.{....UUU..7...FMM.B.....r....`.p8.a....r....;G<..t.....i.m..-......x.......<00......>.x.......<y..?....2...o..&.~.-.\|...F..:D"...;.`..X.V..7.G..5W.\.....nooW....8~..<s.........-j.g.\|..'.x<\.p......G&.......j....u...JEE.G..e...:u...z.W_}Us..w...t~...w_.tI....'Nl....sss.}.....D.P ..f...-Z.......!....b~~...7SUUE"......Ass3{..!....\...........v..U.L&.....3.<C6.%..a...T.....[..j....i.[.l.4Mfgg1M...r._.R..............v.CCCC.O.>..W.^\|.E....^...s.N......:.i.(.........q.\X.V....P.P(...P( .......Q$ ...s\.t.].v..j=u../....H@...t:...;vH]....$.L..B)...0.t...z.N'.\|.].1..-[.PVVF&.!..RWW.....\|.......&>..#.v;[.n.R..SV...@.......%...[ZZ8z.(.L.....R.X,F4.....p8..i

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 07:37:10.892366886 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.892429113 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:10.892795086 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.893023968 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.893106937 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:10.893184900 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.893310070 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.893347025 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:10.893455029 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:10.893491030 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.672231913 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.672732115 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.672791004 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.673686028 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.673773050 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.674812078 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.676394939 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.676449060 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.676577091 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.676603079 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.676800966 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.676816940 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.678138971 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.678244114 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.679296970 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.679402113 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.721668959 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.721677065 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:11.721698999 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:11.764370918 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:13.040514946 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.040560961 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.040618896 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.040869951 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.040887117 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.288518906 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:13.297887087 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:13.301515102 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:13.303349018 CET	49736	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:13.303399086 CET	443	49736	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:13.687094927 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.690327883 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.690360069 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.691907883 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.692060947 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.697316885 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.697511911 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.755264044 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:13.755279064 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:13.799726963 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:13.799768925 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:13.801532984 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:13.803139925 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:13.803158045 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:13.815228939 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:14.494074106 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.494162083 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.498183012 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.498238087 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.498465061 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.548940897 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.562906027 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.607325077 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.820533991 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.820569992 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.820631027 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.820738077 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.820782900 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.820811987 CET	49741	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.820828915 CET	443	49741	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.861129045 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.861251116 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:14.861349106 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.861704111 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:14.861742973 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.552944899 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.553024054 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.554542065 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.554570913 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.554821968 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.555927038 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.599385023 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.883289099 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.883341074 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.883486032 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.884121895 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.884162903 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:15.884191036 CET	49742	443	192.168.2.4	184.28.90.27
Nov 20, 2024 07:37:15.884206057 CET	443	49742	184.28.90.27	192.168.2.4
Nov 20, 2024 07:37:21.386181116 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:21.386287928 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:21.386540890 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:21.387729883 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:21.387772083 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:21.735909939 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:21.783329964 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:22.060699940 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:22.060925007 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:22.067310095 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:22.067348003 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:22.067572117 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:22.110713959 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:22.787415981 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:22.787813902 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:22.787875891 CET	443	49735	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:22.787942886 CET	49735	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:22.790369034 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:22.790447950 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:22.790522099 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:22.790816069 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:22.790851116 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:22.893248081 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:22.939359903 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125439882 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125456095 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125462055 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125494957 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125523090 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125680923 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.125682116 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.125761032 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125808954 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.125845909 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.125875950 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.126122952 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.126168966 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.126228094 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.500992060 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.501311064 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.501369953 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.502486944 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.502820969 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.502958059 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.502969980 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.502995968 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.546346903 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.579364061 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:23.579513073 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:23.579566956 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:23.766552925 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.766622066 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.766653061 CET	49743	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:37:23.766670942 CET	443	49743	172.202.163.200	192.168.2.4
Nov 20, 2024 07:37:23.842681885 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.842751980 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.842823982 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.842884064 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.842917919 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.842941999 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.842967987 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.855515957 CET	49745	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.855550051 CET	443	49745	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.861408949 CET	49739	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:37:23.861435890 CET	443	49739	216.58.212.164	192.168.2.4
Nov 20, 2024 07:37:23.906433105 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.906465054 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:23.906522036 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.906783104 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:23.906797886 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.604955912 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.605484962 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.605509996 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.609075069 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.609148979 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.609626055 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.609798908 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.609805107 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.651380062 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.656938076 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.656951904 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.704046011 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.935261965 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.935337067 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.935472012 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:24.935487032 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.935525894 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.936288118 CET	49748	443	192.168.2.4	89.46.106.37
Nov 20, 2024 07:37:24.936300039 CET	443	49748	89.46.106.37	192.168.2.4
Nov 20, 2024 07:37:25.145524979 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 07:37:25.151612043 CET	80	49723	199.232.214.172	192.168.2.4
Nov 20, 2024 07:37:25.151982069 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 07:38:00.037699938 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.037789106 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:00.037884951 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.038264036 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.038300991 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:00.743145943 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:00.743263960 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.746443033 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.746469021 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:00.746973991 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:00.754815102 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:00.795371056 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.011866093 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.011892080 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.011981964 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.012043953 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.012151957 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.013467073 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.013514042 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.013556957 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.013578892 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.013606071 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.013710022 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.013767004 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.017369032 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.017405033 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:01.017432928 CET	49751	443	192.168.2.4	172.202.163.200
Nov 20, 2024 07:38:01.017446995 CET	443	49751	172.202.163.200	192.168.2.4
Nov 20, 2024 07:38:02.522907972 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:02.522959948 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:02.523024082 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:02.523273945 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:02.523283958 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.203123093 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.203185081 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.204675913 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.204689026 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.205015898 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.212418079 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.259351015 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.351504087 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.351542950 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.351562977 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.351579905 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.351599932 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.351625919 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.351654053 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.440463066 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.440491915 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.440531015 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.440541983 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.440570116 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.440583944 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.443547964 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.443568945 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.443609953 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.443619013 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.443650007 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.443660021 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544147968 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544173956 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544215918 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544229984 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544259071 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544270039 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544544935 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544568062 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544605017 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544612885 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544635057 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544655085 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544938087 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544956923 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.544991016 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.544998884 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.545028925 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.545042038 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.545337915 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.545358896 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.545389891 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.545397997 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.545419931 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.545429945 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.622622967 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.622653961 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.622807980 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.622822046 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.622869015 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.624151945 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624174118 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624212980 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.624222040 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624244928 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.624258041 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.624847889 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624867916 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624912977 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.624929905 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.624968052 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.626902103 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.626923084 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.626954079 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.626962900 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.626981020 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.627005100 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.627567053 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.627590895 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.627625942 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.627634048 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.627648115 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.627669096 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629196882 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629215956 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629249096 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629256010 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629268885 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629286051 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629565001 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629617929 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629625082 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629648924 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629661083 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629688025 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629717112 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629733086 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.629748106 CET	49752	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.629755020 CET	443	49752	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.682801962 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.682813883 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.682854891 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.682904959 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.682923079 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.682975054 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.683135986 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.683152914 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.683290005 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.683343887 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.683794022 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.683815956 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.683896065 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.683985949 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684015036 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.684062004 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684128046 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.684182882 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684259892 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684271097 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.684464931 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684551954 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:03.684619904 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684685946 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:03.684711933 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.322679996 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.323173046 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.323246002 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.323590040 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.323605061 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.325565100 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.325828075 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.325885057 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.326122046 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.326134920 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.329240084 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.329468966 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.329494953 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.329781055 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.329787016 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.331001043 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.331212044 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.331233025 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.331499100 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.331509113 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.357769012 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.358086109 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.358105898 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.358460903 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.358468056 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.422801971 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.422893047 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.422996998 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.423218012 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.423264027 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.423305035 CET	49757	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.423341036 CET	443	49757	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.425998926 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.426028013 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.426101923 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.426258087 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.426270008 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.428283930 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.428356886 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.428548098 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.428548098 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.428548098 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.429936886 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.429996014 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430080891 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430090904 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430241108 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430253029 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430259943 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430484056 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430567026 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430663109 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430807114 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.430824995 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430855989 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430948973 CET	443	49756	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.430994987 CET	49756	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.432167053 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.432256937 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.432356119 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.432455063 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.432480097 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.451777935 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.451803923 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.451864004 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.451962948 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.452117920 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.452137947 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.452152967 CET	49755	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.452158928 CET	443	49755	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.454090118 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.454174042 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.454272985 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.454385042 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.454406977 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.465346098 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.465363979 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.465415001 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.465419054 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.465459108 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.465559959 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.465576887 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.465589046 CET	49754	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.465595007 CET	443	49754	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.467250109 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.467276096 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.467344999 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.467472076 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.467499018 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:04.737212896 CET	49753	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:04.737274885 CET	443	49753	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.071626902 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.072132111 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.072190046 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.072613001 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.072626114 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.074518919 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.074789047 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.074827909 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.075120926 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.075134039 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.090698957 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.090986967 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.091042995 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.091057062 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.091290951 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.091304064 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.091332912 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.091361046 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.091737032 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.091742992 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.138803005 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.139116049 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.139137983 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.139432907 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.139444113 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.172278881 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.172344923 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.172431946 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.172528028 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.172570944 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.172600031 CET	49759	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.172616005 CET	443	49759	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.174803019 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.174885988 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.174983025 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.175081968 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.175106049 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.181210041 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.181358099 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.181426048 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.181473970 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.181499958 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.181538105 CET	49760	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.181555033 CET	443	49760	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.183339119 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.183420897 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.183516979 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.183613062 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.183634996 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.192677975 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.192738056 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.192799091 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.192877054 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.192877054 CET	49761	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.192917109 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.192945004 CET	443	49761	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.194741964 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.194823027 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.195019007 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.195166111 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.195200920 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.196374893 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.196438074 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.196485043 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.196561098 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.196573973 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.196583986 CET	49758	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.196588993 CET	443	49758	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.198359966 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.198389053 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.198467970 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.198575020 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.198599100 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.244155884 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.244195938 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.244259119 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.244369030 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.244389057 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.244429111 CET	49762	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.244440079 CET	443	49762	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.246340990 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.246428013 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.246515036 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.246649027 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.246668100 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.818689108 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.819258928 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.819302082 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.819670916 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.819683075 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.842608929 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.843019009 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.843092918 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.843342066 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.843354940 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.843408108 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.843815088 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.843842983 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.844103098 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.844110012 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.850054979 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.850323915 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.850337982 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.850586891 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.850595951 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.885562897 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.885943890 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.886020899 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.886255980 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.886269093 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.928683996 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.928751945 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.928816080 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.928999901 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.929022074 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.929039001 CET	49763	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.929045916 CET	443	49763	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.931844950 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.931874990 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.931952953 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.932101965 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.932116032 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.942157030 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.942310095 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.942404032 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.942481995 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.942481995 CET	49766	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.942523003 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.942548990 CET	443	49766	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.944052935 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.944119930 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.944185019 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.944317102 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.944336891 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.944355965 CET	49765	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.944363117 CET	443	49765	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.945200920 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.945283890 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.945379019 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.945586920 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.945620060 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.946224928 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.946234941 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.946297884 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.946439028 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.946450949 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.952461004 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.952604055 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.952670097 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.952727079 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.952740908 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.952789068 CET	49764	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.952801943 CET	443	49764	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.954736948 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.954760075 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.954853058 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.955046892 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.955065966 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.986251116 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.986406088 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.986494064 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.986588001 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.986648083 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.986684084 CET	49767	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.986699104 CET	443	49767	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.989185095 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.989227057 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:05.989306927 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.989485979 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:05.989505053 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.594413042 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.595052958 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.595129967 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.595634937 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.595648050 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.595711946 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.596009016 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.596036911 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.596452951 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.596457958 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.597347021 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.597609043 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.597616911 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.598050117 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.598054886 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.606302977 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.606565952 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.606595039 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.606990099 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.607000113 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.627137899 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.627688885 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.627749920 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.628118038 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.628124952 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.693716049 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.693890095 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.694082022 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.694082022 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.694082022 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697109938 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.697175980 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.697232962 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697305918 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697388887 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.697405100 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697418928 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.697431087 CET	49770	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697436094 CET	443	49770	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.697490931 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697648048 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.697684050 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700144053 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700176001 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700262070 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700424910 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700443029 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700664043 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700726986 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700789928 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700905085 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700907946 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.700917959 CET	49768	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.700921059 CET	443	49768	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.703552008 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.703577995 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.703663111 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.707906961 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.707931995 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.711034060 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.711098909 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.711165905 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.711275101 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.711275101 CET	49769	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.711332083 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.711364031 CET	443	49769	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.713727951 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.713771105 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.713877916 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.714072943 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.714102983 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.727895021 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.727953911 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.728007078 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.728233099 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.728233099 CET	49772	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.728245974 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.728256941 CET	443	49772	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.730652094 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.730671883 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.730751038 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.730935097 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.730947971 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:06.999856949 CET	49771	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:06.999917984 CET	443	49771	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.336584091 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.337122917 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.337137938 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.337766886 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.337771893 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.340534925 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.340857029 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.340929985 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.341312885 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.341326952 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.341619015 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.341902018 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.341931105 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.342345953 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.342355967 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.344743967 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.345041990 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.345084906 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.345465899 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.345478058 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.373012066 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.373645067 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.373663902 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.374165058 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.374171019 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.439891100 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.440046072 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.440135002 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.440211058 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.440211058 CET	49773	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.440251112 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.440285921 CET	443	49773	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.441319942 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.441381931 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.441432953 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.441617012 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.441628933 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.441644907 CET	49774	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.441651106 CET	443	49774	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.442642927 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.442706108 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.442773104 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.443509102 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.443530083 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.443555117 CET	49775	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.443567991 CET	443	49775	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.445595026 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.445677996 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.445780039 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.446367025 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.446400881 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.446891069 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.446960926 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.447016954 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447382927 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447382927 CET	49776	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447402954 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447406054 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.447428942 CET	443	49776	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.447429895 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.447530031 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447818041 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.447834015 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.449491024 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.449558973 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.449635029 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.450766087 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.450782061 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.450839996 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.450905085 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.450938940 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.451014996 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.451029062 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.475599051 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.475665092 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.475743055 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.475889921 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.475910902 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.475919962 CET	49777	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.475924015 CET	443	49777	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.478713036 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.478775978 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:07.479073048 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.479073048 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:07.479163885 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.086796045 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.087493896 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.087553024 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.088090897 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.088144064 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.112126112 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.112502098 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.112581015 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.112596035 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.113039970 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.113112926 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.113117933 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.113365889 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.113379955 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.113828897 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.113833904 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.114085913 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.114119053 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.114532948 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.114546061 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.120735884 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.121140957 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.121155024 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.121700048 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.121710062 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.187174082 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.187237978 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.187336922 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.187546968 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.187591076 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.187619925 CET	49778	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.187634945 CET	443	49778	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.190826893 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.190860033 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.190958977 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.191143036 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.191155910 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.214605093 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.214668036 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.214740038 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.214862108 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.214863062 CET	49782	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.214903116 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.214929104 CET	443	49782	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.215881109 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.215946913 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.216000080 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.216087103 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.216108084 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.216118097 CET	49779	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.216123104 CET	443	49779	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.217583895 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.217667103 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.217694998 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.217724085 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.217758894 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.217794895 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218002081 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218030930 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.218123913 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218137026 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.218146086 CET	49781	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218149900 CET	443	49781	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.218406916 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218508005 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.218595028 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218750000 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.218790054 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.220818996 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.220840931 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.220938921 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.221101999 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.221124887 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.226025105 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.226166010 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.226236105 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.226289988 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.226290941 CET	49780	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.226305962 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.226326942 CET	443	49780	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.228732109 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.228759050 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.228842974 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.229028940 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.229054928 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.827459097 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.828171968 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.828191996 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.828665018 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.828670025 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.870088100 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.870831013 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.870887995 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.871256113 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.871270895 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.874414921 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.874906063 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.874977112 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.875400066 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.875430107 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.884301901 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.884696960 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.884756088 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.885248899 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.885262012 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.902457952 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.903079987 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.903098106 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.903697014 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.903707981 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.927536964 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.927612066 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.927674055 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.927982092 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.927982092 CET	49783	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.927998066 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.928005934 CET	443	49783	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.931171894 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.931255102 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.931360960 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.931557894 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.931581020 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.971041918 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.971199036 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.971271038 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.971414089 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.971415043 CET	49784	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.971451044 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.971476078 CET	443	49784	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.973805904 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.973849058 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.973938942 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.974134922 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.974145889 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.976358891 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.976578951 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.976640940 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.976690054 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.976738930 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.976773024 CET	49787	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.976785898 CET	443	49787	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.979120016 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.979202032 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.979291916 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.979440928 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.979474068 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.989502907 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.989572048 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.989664078 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.989759922 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.989795923 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.989824057 CET	49786	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.989837885 CET	443	49786	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.992218971 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.992258072 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:08.992346048 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.992532969 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:08.992561102 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.027925968 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.028002977 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.028068066 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.028208017 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.028232098 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.028254986 CET	49785	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.028264999 CET	443	49785	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.030857086 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.030900955 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.030992985 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.031161070 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.031177998 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.611962080 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.612642050 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.612680912 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.613143921 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.613151073 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.614372969 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.614700079 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.614728928 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.615137100 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.615144968 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.620379925 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.620671034 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.620680094 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.621110916 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.621118069 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.644221067 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.644778013 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.644835949 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.645180941 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.645195007 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.676073074 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.676525116 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.676584005 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.677048922 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.677081108 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.714008093 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.714145899 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.714256048 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.714340925 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.714340925 CET	49790	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.714381933 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.714410067 CET	443	49790	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717205048 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717274904 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717334032 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717497110 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717516899 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717533112 CET	49789	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717531919 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717539072 CET	443	49789	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717601061 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.717688084 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717843056 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.717890024 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.719436884 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.719578981 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.719647884 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.719707012 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.719712973 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.719727993 CET	49791	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.719732046 CET	443	49791	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.720948935 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.721009970 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.721091032 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.721244097 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.721273899 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.721970081 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.721992016 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.722060919 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.722189903 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.722203970 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.745265961 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.745331049 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.745498896 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.745577097 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.745578051 CET	49792	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.745618105 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.745645046 CET	443	49792	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.747947931 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.747970104 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.748050928 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.748225927 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.748239994 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.776304007 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.776390076 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.776454926 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.776700020 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.776700020 CET	49793	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.776726007 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.776750088 CET	443	49793	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.779112101 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.779195070 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:09.779287100 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.779489040 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:09.779524088 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.360930920 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.361596107 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.361689091 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.362042904 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.362060070 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.379492044 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.379895926 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.379952908 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.380378008 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.380392075 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.381859064 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.382119894 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.382158995 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.382565022 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.382596970 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.397855043 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.398123026 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.398179054 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.398576021 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.398602962 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.439932108 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.440253019 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.440327883 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.440675020 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.440687895 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.459537029 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.459691048 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.459760904 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.459933043 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.459949017 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.459965944 CET	49796	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.459971905 CET	443	49796	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.462811947 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.462893963 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.462990999 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.463135958 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.463170052 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.478473902 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.478542089 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.478602886 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.478694916 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.478694916 CET	49797	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.478718042 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.478739977 CET	443	49797	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.480945110 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.481028080 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.481105089 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.481239080 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.481270075 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.485014915 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.485081911 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.485140085 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.485214949 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.485250950 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.485277891 CET	49795	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.485291004 CET	443	49795	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.487338066 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.487373114 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.487448931 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.487570047 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.487585068 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.502368927 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.502522945 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.502568007 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.502619982 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.502620935 CET	49794	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.502651930 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.502674103 CET	443	49794	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.504903078 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.504987955 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.505080938 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.505203009 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.505235910 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.725699902 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.725764990 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.725847006 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.726027012 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.726027012 CET	49798	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.726058960 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.726083994 CET	443	49798	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.729043961 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.729074001 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:10.729154110 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.729306936 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:10.729321003 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.122531891 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.123034000 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.123097897 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.123636961 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.123655081 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.135468960 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.135739088 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.135750055 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.136221886 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.136226892 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.143095016 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.143346071 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.143367052 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.143800020 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.143805027 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.228991985 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.229051113 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.229119062 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.229361057 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.229361057 CET	49800	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.229406118 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.229439974 CET	443	49800	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.231997967 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.232079983 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.232161045 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.232275963 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.232299089 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.236656904 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.236725092 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.236774921 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.236924887 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.236939907 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.236948967 CET	49801	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.236953974 CET	443	49801	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.241453886 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.241499901 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.241569042 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.241703033 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.241725922 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.247292995 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.247489929 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.247545958 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.247587919 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.247589111 CET	49799	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.247606993 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.247617960 CET	443	49799	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.249972105 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.250005960 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.250083923 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.250222921 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.250247955 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.369225979 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.369743109 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.369802952 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.370171070 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.370184898 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.375444889 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.375710964 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.375730038 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.376075983 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.376080990 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.470952034 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.471029997 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.471107960 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.471199036 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.471241951 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.471271992 CET	49802	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.471287012 CET	443	49802	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.473757982 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.473782063 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.473860025 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.473993063 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.474004030 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.476813078 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.476880074 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.476926088 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.477005959 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.477015018 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.477024078 CET	49803	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.477027893 CET	443	49803	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.479192019 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.479207993 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.479278088 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.479388952 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.479401112 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.871944904 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.872755051 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.872826099 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.873300076 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.873312950 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.877063990 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.877326965 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.877343893 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.877737045 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.877743006 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.919114113 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.919648886 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.919728994 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.919840097 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.919855118 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.970846891 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.971012115 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.971115112 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.971266985 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.971266985 CET	49804	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.971307993 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.971348047 CET	443	49804	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.974184036 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.974267006 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.974360943 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.974514961 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.974544048 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.978427887 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.978477001 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.978518009 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.978631973 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.978650093 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.978658915 CET	49805	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.978663921 CET	443	49805	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.981419086 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.981456041 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:11.981515884 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.981625080 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:11.981643915 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.022705078 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.022855997 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.023077011 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.023077965 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.023077965 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.024910927 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.024993896 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.025074959 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.025182009 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.025202036 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.113257885 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.113636017 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.113646030 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.114182949 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.114187956 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.122131109 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.122432947 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.122445107 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.122865915 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.122874975 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.213078022 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.213120937 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.213162899 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.213268042 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.213287115 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.213294983 CET	49808	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.213299990 CET	443	49808	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.215626955 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.215647936 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.215708017 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.215881109 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.215893984 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.223267078 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.223442078 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.223491907 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.223520994 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.223526001 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.223535061 CET	49807	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.223539114 CET	443	49807	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.225668907 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.225748062 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.225837946 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.225976944 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.226008892 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.324094057 CET	49806	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.324120998 CET	443	49806	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.615468979 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.616749048 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.616766930 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.620697021 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.620702982 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.621167898 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.621690989 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.621763945 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.622324944 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.622338057 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.667217016 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.667804003 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.667862892 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.668328047 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.668380976 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.715595007 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.715646982 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.715694904 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.715920925 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.715934992 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.715946913 CET	49810	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.715951920 CET	443	49810	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.718822956 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.718862057 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.718954086 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.719136953 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.719149113 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.724251032 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.724405050 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.724481106 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.724555969 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.724555969 CET	49809	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.724596977 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.724627972 CET	443	49809	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.726819992 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.726901054 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.726986885 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.727142096 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.727170944 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.768569946 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.768714905 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.768836021 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.769186020 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.769186020 CET	49811	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.769248962 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.769283056 CET	443	49811	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.771462917 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.771550894 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.771661997 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.771836996 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.771856070 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.856878996 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.857547045 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.857562065 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.857780933 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.857784986 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.893176079 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.893574953 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.893645048 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.893887997 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.893901110 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.958297014 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.958347082 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.958424091 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.958659887 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.958659887 CET	49812	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.958678961 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.958688021 CET	443	49812	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.961476088 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.961559057 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.961659908 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.961869955 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.961905003 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.996951103 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.997087955 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.997287035 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.997612000 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.997656107 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:12.997684956 CET	49813	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:12.997699976 CET	443	49813	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.000322104 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.000389099 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.000473976 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.000664949 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.000694036 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.095346928 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:13.095428944 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.095532894 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:13.095766068 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:13.095802069 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.355885029 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.356554985 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.356580973 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.356899023 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.356904984 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.378367901 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.379112959 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.379143953 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.379359961 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.379375935 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.411282063 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.412043095 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.412131071 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.412250042 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.412265062 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.456418037 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.456465006 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.456521988 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.456724882 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.456736088 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.456743956 CET	49814	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.456748962 CET	443	49814	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.459542990 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.459568024 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.459645987 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.459813118 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.459824085 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.479583025 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.479737997 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.479851007 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.480014086 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.480040073 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.480065107 CET	49815	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.480079889 CET	443	49815	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.482279062 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.482379913 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.482470989 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.482629061 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.482681036 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.513617992 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.513684988 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.513775110 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.514029026 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.514075041 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.514108896 CET	49816	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.514123917 CET	443	49816	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.516510010 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.516521931 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.516608000 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.516779900 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.516788960 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.599164963 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.599910975 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.599966049 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.600281000 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.600297928 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.637495041 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.638102055 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.638175011 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.638633013 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.638649940 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.699028015 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.699074030 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.699296951 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.699686050 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.699722052 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.699747086 CET	49817	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.699762106 CET	443	49817	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.702714920 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.702796936 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.702902079 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.703118086 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.703154087 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.737401009 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.737557888 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.737662077 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.738044977 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.738091946 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.738120079 CET	49818	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.738137007 CET	443	49818	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.739553928 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.739840984 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:13.739880085 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.740345955 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.740708113 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.740736961 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.740811110 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.740890980 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:13.740901947 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:13.740986109 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:13.741082907 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:13.781327963 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:14.104861021 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.105328083 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.105338097 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.106090069 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.106093884 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.121185064 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.121581078 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.121618986 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.121947050 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.121963978 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.163577080 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.164262056 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.164273977 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.164578915 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.164582968 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.206140041 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.206187010 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.206367016 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.206449986 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.206456900 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.206474066 CET	49820	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.206482887 CET	443	49820	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.209522963 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.209604025 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.209692001 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.209851980 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.209884882 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.221445084 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.221622944 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.221687078 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.221730947 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.221760035 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.221787930 CET	49821	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.221805096 CET	443	49821	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.223969936 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.223999977 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.224069118 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.224217892 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.224232912 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.266062975 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.266128063 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.266319036 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.266587973 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.266591072 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.266601086 CET	49822	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.266603947 CET	443	49822	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.268790007 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.268820047 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.268908024 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.269119978 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.269139051 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.347670078 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.348159075 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.348197937 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.348617077 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.348628044 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.385771990 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.386821032 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.386838913 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.387408972 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.387413025 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.448700905 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.448746920 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.448817015 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.449007034 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.449050903 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.449080944 CET	49823	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.449095964 CET	443	49823	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.451931000 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.451976061 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.452056885 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.452208996 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.452223063 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.503912926 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.504074097 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.504194975 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.504427910 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.504437923 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.504467010 CET	49824	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.504471064 CET	443	49824	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.507015944 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.507097006 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.507195950 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.507363081 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.507399082 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.968513966 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.969320059 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.969387054 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.969917059 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.969932079 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.970071077 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.970402002 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.970416069 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.970933914 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.970940113 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.971940994 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.972295046 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.972325087 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:14.972682953 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:14.972692966 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.068761110 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.068902016 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.069092989 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.069412947 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.069447994 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.069474936 CET	49827	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.069489002 CET	443	49827	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.070789099 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.070934057 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.070995092 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.071043015 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.071058989 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.071068048 CET	49826	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.071073055 CET	443	49826	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072617054 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072634935 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072658062 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072695017 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072762966 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072813034 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072887897 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072902918 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072920084 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072920084 CET	49825	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.072937965 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.072958946 CET	443	49825	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.073204041 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.073232889 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.073304892 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.073385000 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.073394060 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.075158119 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.075244904 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.075356007 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.075550079 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.075579882 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.119093895 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.119491100 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.119501114 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.119872093 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.119877100 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.153712988 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.154187918 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.154206991 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.154876947 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.154881954 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.223059893 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.223119020 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.223165989 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.223437071 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.223445892 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.223454952 CET	49828	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.223459959 CET	443	49828	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.226121902 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.226206064 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.226281881 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.226453066 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.226490021 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.252360106 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.252513885 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.252573967 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.252723932 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.252733946 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.252748013 CET	49829	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.252753973 CET	443	49829	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.255055904 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.255110025 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.255183935 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.255357027 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.255388975 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.711481094 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.712239027 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.712296963 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.713500977 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.713530064 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.714196920 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.714540958 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.714560986 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.715199947 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.715212107 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.727786064 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.728256941 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.728311062 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.728912115 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.728925943 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.812659979 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.812725067 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.812937975 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.813318014 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.813361883 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.813391924 CET	49831	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.813406944 CET	443	49831	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.813986063 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814012051 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814081907 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.814094067 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814246893 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.814255953 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814281940 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.814414978 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814452887 CET	443	49830	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.814500093 CET	49830	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816339970 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816342115 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816423893 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.816425085 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.816536903 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816539049 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816634893 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816653967 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.816781044 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.816812992 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.827887058 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.828054905 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.828135967 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.828322887 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.828322887 CET	49832	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.828363895 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.828392982 CET	443	49832	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.830297947 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.830380917 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.830476046 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.830682039 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.830718040 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.860641956 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.861001015 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.861035109 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.861341953 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.861354113 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.922060013 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.922521114 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.922550917 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.922925949 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.922940016 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.960443974 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.960477114 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.960531950 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.960824966 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.961132050 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.961132050 CET	49833	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.961195946 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.961230040 CET	443	49833	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.963201046 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.963282108 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:15.963382006 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.963733912 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:15.963839054 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.024594069 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.024648905 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.024770021 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.024810076 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.024841070 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.024883986 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.024997950 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.025229931 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.025257111 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.025280952 CET	49834	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.025295019 CET	443	49834	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.027652979 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.027735949 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.027832985 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.027982950 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.028017998 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.448019981 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.448601007 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.448643923 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.448925972 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.448939085 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.458343983 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.458817959 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.458858967 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.459089994 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.459100962 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.507622004 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.508004904 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.508063078 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.508310080 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.508322954 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.548263073 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.548685074 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.548799038 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.548890114 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.548890114 CET	49836	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.548930883 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.548959970 CET	443	49836	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.551548004 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.551630974 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.551745892 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.551915884 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.551951885 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.559180021 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.559200048 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.559267044 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.559288025 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.559494972 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.559494972 CET	49835	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.559514046 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.559542894 CET	443	49835	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.561783075 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.561856985 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.561944962 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.562099934 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.562131882 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.611552954 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.611912966 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.612003088 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.612080097 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.612080097 CET	49837	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.612122059 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.612149000 CET	443	49837	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.614327908 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.614370108 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.614451885 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.614609003 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.614650965 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.615437984 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.615791082 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.615863085 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.616108894 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.616122007 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.681687117 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.682087898 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.682116985 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.682454109 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.682465076 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.721280098 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.723253012 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.723356962 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.723406076 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.723448992 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.723489046 CET	49838	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.723504066 CET	443	49838	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.724908113 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.724953890 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.725047112 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.725131989 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.725146055 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.780870914 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.781025887 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.781120062 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.781202078 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.781202078 CET	49839	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.781241894 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.781274080 CET	443	49839	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.783669949 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.783714056 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:16.783807993 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.784013987 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:16.784044027 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.199532986 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.200385094 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.200429916 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.200449944 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.200809956 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.200869083 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.200927019 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.200941086 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.201436043 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.201448917 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.268562078 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.269120932 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.269176960 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.269583941 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.269596100 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.299485922 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.300168991 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.300345898 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.300347090 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.300347090 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.303347111 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.303426981 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.303525925 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.303677082 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.303709984 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.310703039 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.310770035 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.310833931 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.310952902 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.310986042 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.311011076 CET	49840	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.311024904 CET	443	49840	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.313669920 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.313754082 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.313858986 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.314028025 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.314060926 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.362673998 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.363240004 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.363262892 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.363687038 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.363698959 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.369469881 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.369622946 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.369698048 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.369956970 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.370002985 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.370033026 CET	49842	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.370049000 CET	443	49842	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.372598886 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.372680902 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.372781992 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.372951984 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.372983932 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.426217079 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.426743031 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.426801920 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.427210093 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.427222013 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.462034941 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.462218046 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.462297916 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.462615013 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.462615967 CET	49843	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.462658882 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.462687016 CET	443	49843	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.465441942 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.465539932 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.465643883 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.465823889 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.465856075 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.525449991 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.525649071 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.525723934 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.526041985 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.526087046 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.526117086 CET	49844	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.526132107 CET	443	49844	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.529803991 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.529836893 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.529920101 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.530047894 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.530064106 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.610091925 CET	49841	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.610162020 CET	443	49841	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.941745996 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.942315102 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.942359924 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.942919970 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.942935944 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.959604025 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.960048914 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.960129976 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:17.960822105 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:17.960875988 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.019756079 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.020317078 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.020373106 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.020709038 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.020723104 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.042969942 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.043066025 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.043257952 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.043365955 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.043365955 CET	49845	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.043406963 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.043441057 CET	443	49845	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.047044039 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.047127962 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.047224045 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.047374964 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.047405005 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.065794945 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.065912008 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.065990925 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.066051960 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.066090107 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.066251040 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.066251040 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.066251040 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.068764925 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.068794966 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.068866968 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.069010019 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.069025040 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.102986097 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.106631994 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.106718063 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.107331038 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.107347012 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.134780884 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.134993076 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.135176897 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.135263920 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.135265112 CET	49847	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.135304928 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.135361910 CET	443	49847	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.137931108 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.138012886 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.138106108 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.138293028 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.138329029 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.180280924 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.180706978 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.180717945 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.181305885 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.181310892 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.202565908 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.202724934 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.202771902 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.202790022 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.202850103 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.202886105 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.202933073 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.202970028 CET	49848	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.202986002 CET	443	49848	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.205681086 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.205718994 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.205790997 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.205980062 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.205995083 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.280744076 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.280911922 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.280972958 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.281110048 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.281122923 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.281132936 CET	49849	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.281137943 CET	443	49849	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.283818960 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.283901930 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.283998013 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.284142971 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.284177065 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.374648094 CET	49846	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.374706030 CET	443	49846	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.695669889 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.696185112 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.696244955 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.696871042 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.696883917 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.742381096 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.742808104 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.742820024 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.743448019 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.743462086 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.780529976 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.781132936 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.781197071 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.782038927 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.782052994 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.796546936 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.796892881 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.796962976 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.797285080 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.797322035 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.797350883 CET	49850	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.797365904 CET	443	49850	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.803436041 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.803479910 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.803565979 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.803709984 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.803725958 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.852272987 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.852437019 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.852504969 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.852596998 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.852608919 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.852619886 CET	49851	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.852624893 CET	443	49851	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.855643034 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.855669022 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.855750084 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.855962038 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.855979919 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.860956907 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.861340046 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.861361027 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.861902952 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.861907959 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.879955053 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.880150080 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.880235910 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.880249023 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.880316019 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.880377054 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.880408049 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.880433083 CET	49852	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.880448103 CET	443	49852	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.883013964 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.883053064 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.883148909 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.883311033 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.883347988 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.936193943 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.936845064 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.936903954 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.937376976 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.937391043 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.962836981 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.962899923 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.962959051 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.963162899 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.963172913 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.963196993 CET	49853	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.963202000 CET	443	49853	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.965692043 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.965706110 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:18.965797901 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.965955019 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:18.965967894 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.039827108 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.039984941 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.040066004 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.040152073 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.040190935 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.040218115 CET	49854	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.040236950 CET	443	49854	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.042825937 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.042866945 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.042951107 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.043155909 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.043171883 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.468585968 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.473922014 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.473949909 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.474430084 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.474436998 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.523652077 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.524336100 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.524379969 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.524827003 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.524832010 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.534384012 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.534727097 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.534744978 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.535283089 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.535290956 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.574335098 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.574664116 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.574827909 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.574827909 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.574827909 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.577953100 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.577990055 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.578083992 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.578243017 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.578258038 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.608772993 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.610222101 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.610244989 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.610867023 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.610873938 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.626704931 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.626887083 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.626983881 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.627048016 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.627063990 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.627199888 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.627218962 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.627229929 CET	49856	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.627237082 CET	443	49856	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.629853010 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.629928112 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.630029917 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.630167007 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.630197048 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.636373997 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.636686087 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.636766911 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.636935949 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.636954069 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.636965990 CET	49857	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.636972904 CET	443	49857	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.639422894 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.639447927 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.639527082 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.639703989 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.639717102 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710566044 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710681915 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710736990 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710799932 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.710839987 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710865021 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.710882902 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.710896015 CET	49858	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.710901976 CET	443	49858	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.711431026 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.711452007 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.712029934 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.712037086 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.713553905 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.713639975 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.713721991 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.713862896 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.713898897 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.812902927 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.813147068 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.813250065 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.813391924 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.813433886 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.813463926 CET	49859	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.813478947 CET	443	49859	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.816140890 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.816224098 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.817832947 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.818021059 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.818056107 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:19.874840021 CET	49855	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:19.874871016 CET	443	49855	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.237756014 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.238287926 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.238312006 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.238991022 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.238996983 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.279738903 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.280260086 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.280271053 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.280668020 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.280673027 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.298314095 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.298655033 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.298712969 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.299108982 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.299124956 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.374989986 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.375390053 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.375428915 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.375919104 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.375933886 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.379961967 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.379992962 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.380036116 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.380040884 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.380093098 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.380333900 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.380348921 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.380358934 CET	49862	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.380364895 CET	443	49862	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.383500099 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.383569002 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.383676052 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.383846045 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.383878946 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.385534048 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.385806084 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.385864019 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.385921955 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.385927916 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.385936975 CET	49860	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.385941029 CET	443	49860	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.388372898 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.388468981 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.388580084 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.388720036 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.388755083 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.404712915 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.404942036 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.405133009 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.405133009 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.405133963 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.407696962 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.407721996 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.407830000 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.407999992 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.408010960 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.478828907 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.478899956 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.479057074 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.479108095 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.479108095 CET	49863	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.479166031 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.479192019 CET	443	49863	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.482094049 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.482180119 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.482274055 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.482420921 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.482460976 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.485193014 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.485583067 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.485614061 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.486093044 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.486103058 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.589029074 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.589183092 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.589361906 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.589441061 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.589442015 CET	49864	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.589483023 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.589517117 CET	443	49864	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.592675924 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.592716932 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.592814922 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.592998028 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.593012094 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:20.718410015 CET	49861	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:20.718440056 CET	443	49861	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.022329092 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.022880077 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.022938967 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.023294926 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.023309946 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.036478043 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.036894083 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.036951065 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.037219048 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.037233114 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.071814060 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.072247028 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.072305918 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.072594881 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.072609901 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.121289968 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.121445894 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.121526003 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.121648073 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.121665955 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.121678114 CET	49865	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.121684074 CET	443	49865	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.124581099 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.124664068 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.124766111 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.124957085 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.124989986 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.129065037 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.129394054 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.129415035 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.129707098 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.129719019 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.137644053 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.137824059 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.137876034 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.137898922 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.137960911 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.137999058 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.138039112 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.138067007 CET	49866	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.138082027 CET	443	49866	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.140398979 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.140480042 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.140588045 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.140774012 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.140806913 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.177824020 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.177980900 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.178044081 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.178378105 CET	49867	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.178395987 CET	443	49867	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.183989048 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.184031010 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.184112072 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.184263945 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.184293032 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.231193066 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.231566906 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.231633902 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.231674910 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.231698036 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.231710911 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.232105970 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.232109070 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.232117891 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.232157946 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.232192039 CET	49868	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.232208014 CET	443	49868	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.235424042 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.235472918 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.235551119 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.235821962 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.235852003 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.330336094 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.330636024 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.330710888 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.330756903 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.330785036 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.330810070 CET	49869	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.330822945 CET	443	49869	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.332935095 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.332973957 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.333049059 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.333239079 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.333259106 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.787904978 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.788733006 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.788789988 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.789470911 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.789484024 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.789829969 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.790321112 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.790402889 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.790870905 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.790888071 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.831671953 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.832135916 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.832192898 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.832532883 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.832545996 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.873061895 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.873496056 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.873538017 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.874083042 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.874094963 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.892662048 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.892926931 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.892997980 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.893084049 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.893084049 CET	49871	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.893121958 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.893146992 CET	443	49871	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.896167040 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.896236897 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.896325111 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.896337986 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.896533012 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.896563053 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.897391081 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.897466898 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.897490025 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.897552013 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.897613049 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.897655010 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.897681952 CET	49870	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.897697926 CET	443	49870	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.899795055 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.899838924 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.899926901 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.900124073 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.900167942 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.931549072 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.931710958 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.931797981 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.932060003 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.932060957 CET	49872	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.932101965 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.932128906 CET	443	49872	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.934369087 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.934426069 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.934511900 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.934665918 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.934685946 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.972381115 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.972454071 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.972539902 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.972619057 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.972666979 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.972702980 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.972732067 CET	49873	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.972747087 CET	443	49873	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.975049019 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.975151062 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:21.975255966 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.975419998 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:21.975440025 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.033610106 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.034043074 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.034100056 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.034415960 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.034436941 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.132067919 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.132508993 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.132600069 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.132608891 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.132690907 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.132740974 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.132785082 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.132813931 CET	49874	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.132829905 CET	443	49874	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.134813070 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.134900093 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.134990931 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.135190010 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.135220051 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.546013117 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.546809912 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.546852112 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.547468901 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.547481060 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.576075077 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.579617977 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.579760075 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.579837084 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.580147982 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.580162048 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.580377102 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.580435991 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.580668926 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.580681086 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.610385895 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.611063004 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.611121893 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.611325026 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.611340046 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.647149086 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.647228003 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.647428989 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.647542000 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.647586107 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.647618055 CET	49875	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.647634029 CET	443	49875	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.650671005 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.650753021 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.650872946 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.651050091 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.651082039 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.675800085 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.675978899 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.676147938 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.676207066 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.676207066 CET	49877	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.676245928 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.676270962 CET	443	49877	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.678234100 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.678282022 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.678354979 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.678558111 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.678576946 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.683478117 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.683743000 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.683844090 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.683902025 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.683988094 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.684132099 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.684132099 CET	49876	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.684173107 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.684201956 CET	443	49876	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.686379910 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.686454058 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.686547041 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.686705112 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.686728001 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.710321903 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.710354090 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.710403919 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.710459948 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.710562944 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.710819960 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.710819960 CET	49878	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.710860968 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.710890055 CET	443	49878	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.713144064 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.713165045 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.713248968 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.713424921 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.713430882 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.806058884 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.806639910 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.806683064 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.806992054 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.807003975 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.908612967 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.908771038 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.908854961 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.908973932 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.909003973 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.909046888 CET	49879	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.909061909 CET	443	49879	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.915246964 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.915350914 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:22.915635109 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.915770054 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:22.915793896 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.297941923 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.298501015 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.298557997 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.298916101 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.298928022 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.330837011 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.331542969 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.331573009 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.331866026 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.331873894 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.337649107 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.337965012 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.337996006 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.338227987 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.338239908 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.354413986 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.354963064 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.354980946 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.355257034 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.355262995 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.404587984 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.404869080 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.404898882 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.404932976 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.404970884 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.405028105 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.405073881 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.405107021 CET	49880	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.405122042 CET	443	49880	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.407545090 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.407589912 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.407665968 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.407823086 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.407843113 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.431952953 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.432113886 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.432173014 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.432396889 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.432396889 CET	49881	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.432413101 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.432425976 CET	443	49881	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.434518099 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.434581041 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.434683084 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.434827089 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.434854984 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.438664913 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.438755035 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.438889027 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.438909054 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.438975096 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.439070940 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.439349890 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.439369917 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.439402103 CET	49882	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.439414978 CET	443	49882	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.441596985 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.441612005 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.441698074 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.441901922 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.441914082 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.453979969 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.454179049 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.454274893 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.454349995 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.454356909 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.454387903 CET	49883	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.454394102 CET	443	49883	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.456773996 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.456856966 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.456944942 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.457102060 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.457134008 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.671663046 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:23.671709061 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:23.671849966 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:23.678246975 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.678955078 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.678978920 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.679362059 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.679373026 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.777169943 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.777579069 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.777671099 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.777760029 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.777760029 CET	49884	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.777798891 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.777823925 CET	443	49884	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.780627966 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.780710936 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:23.780816078 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.780980110 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:23.781004906 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.046348095 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.047123909 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.047141075 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.047867060 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.047873020 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.076405048 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.076703072 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.076761961 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.077025890 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.077043056 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.078181982 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.078852892 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.078852892 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.078864098 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.078881025 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.148569107 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.148624897 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.148731947 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.148943901 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.148963928 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.148977995 CET	49885	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.148984909 CET	443	49885	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.151721954 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.151792049 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.151901960 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.152089119 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.152120113 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.174982071 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.175282955 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.175343037 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.175353050 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.175420046 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.175457954 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.175493956 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.175522089 CET	49886	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.175537109 CET	443	49886	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.176050901 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.176254034 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.176316977 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.176364899 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.176373959 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.176394939 CET	49887	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.176403999 CET	443	49887	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.177766085 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.177834988 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.177917957 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.178127050 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.178164005 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.178841114 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.178920984 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.179001093 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.179100037 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.179121017 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.301534891 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.302192926 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.302223921 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.302520037 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.302531958 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.403903008 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.404253960 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.404290915 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.404314041 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.404383898 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.404385090 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.404385090 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.407233953 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.407336950 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.407418013 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.407531023 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.407553911 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.425748110 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.426206112 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.426248074 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.426738024 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.426749945 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.525629044 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.526433945 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.526500940 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.526534081 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.526556015 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.526560068 CET	49889	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.526570082 CET	443	49889	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.529056072 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.529139996 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.529238939 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.529324055 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.529345036 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.694389105 CET	49888	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.694438934 CET	443	49888	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.783962965 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.784339905 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.784394026 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.784750938 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.784766912 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.823295116 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.823554993 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.823587894 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.823856115 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.823872089 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.824330091 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.824544907 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.824615955 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.824831009 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.824845076 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.883232117 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.883546114 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.883626938 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.883671999 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.883671999 CET	49890	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.883697987 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.883719921 CET	443	49890	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.885629892 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.885714054 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.885807991 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.885901928 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.885922909 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.934751987 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935142994 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935209990 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935282946 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935343981 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935383081 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935437918 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935482979 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935517073 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935543060 CET	49892	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935558081 CET	443	49892	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935662031 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935714960 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935817957 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935862064 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.935892105 CET	49891	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.935908079 CET	443	49891	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.939364910 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.939426899 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.939517975 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.939929008 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.939960957 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.940660000 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.940691948 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:24.940762043 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.940890074 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:24.940906048 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.071146011 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.071752071 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.071779013 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.072038889 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.072047949 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.180453062 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.181374073 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.181432962 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.181811094 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.181824923 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.185791969 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.185838938 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.185903072 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.186064959 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.186065912 CET	49893	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.186105013 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.186130047 CET	443	49893	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.188586950 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.188669920 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.188765049 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.188905954 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.188925028 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.282800913 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.282870054 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.282972097 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.283083916 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.283085108 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.283269882 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.283330917 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.283373117 CET	49894	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.283389091 CET	443	49894	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.285404921 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.285439014 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.285518885 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.285705090 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.285722017 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.501457930 CET	49819	443	192.168.2.4	216.58.212.164
Nov 20, 2024 07:38:25.501490116 CET	443	49819	216.58.212.164	192.168.2.4
Nov 20, 2024 07:38:25.555486917 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.555897951 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.555969000 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.556299925 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.556315899 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.588618994 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.589131117 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.589162111 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.589482069 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.589499950 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.613357067 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.613698006 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.613728046 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.614187956 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.614192963 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.657283068 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.657480001 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.657552004 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.657629013 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.657629013 CET	49895	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.657671928 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.657699108 CET	443	49895	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.659867048 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.659953117 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.660041094 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.660274029 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.660314083 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.689763069 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.689933062 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.689989090 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.690063953 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.690078974 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.690093040 CET	49896	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.690099955 CET	443	49896	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.692045927 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.692080021 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.692153931 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.692285061 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.692301035 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.717150927 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.717222929 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.717267990 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.717353106 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.717364073 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.717372894 CET	49897	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.717377901 CET	443	49897	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.719271898 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.719355106 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.719429970 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.719558954 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.719593048 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.835963964 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.836299896 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.836354017 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.836671114 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.836683989 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.937602043 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.937647104 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.937699080 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.937835932 CET	49898	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.937849045 CET	443	49898	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.940485954 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.940514088 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.940583944 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.940627098 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.940670967 CET	49903	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.940676928 CET	443	49903	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.940922022 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.940948009 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:25.941306114 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:25.941312075 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.042270899 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.042633057 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.042702913 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.042819977 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.042819977 CET	49899	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.042831898 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.042839050 CET	443	49899	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.045145035 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.045160055 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.045219898 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.045329094 CET	49904	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.045337915 CET	443	49904	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.299392939 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.299779892 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.299838066 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.300345898 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.300359964 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.333374023 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.333784103 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.333797932 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.334326029 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.334331989 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.356669903 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.357006073 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.357039928 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.357506037 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.357517004 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.403748989 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.403889894 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.404097080 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.404150009 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.404150009 CET	49900	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.404181004 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.404203892 CET	443	49900	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.406800032 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.406860113 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.406944036 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.407058001 CET	49905	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.407079935 CET	443	49905	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.431657076 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.431826115 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.432077885 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.432219028 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.432219028 CET	49901	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.432238102 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.432249069 CET	443	49901	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.434463978 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.434492111 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.434561014 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.434674978 CET	49906	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.434688091 CET	443	49906	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.456301928 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.456393957 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.456478119 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.456517935 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.456546068 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.456624985 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.456624985 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.456625938 CET	49902	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.456656933 CET	443	49902	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.458551884 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.458607912 CET	443	49907	13.107.246.45	192.168.2.4
Nov 20, 2024 07:38:26.458682060 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.458762884 CET	49907	443	192.168.2.4	13.107.246.45
Nov 20, 2024 07:38:26.458791018 CET	443	49907	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 07:37:09.185128927 CET	53	61281	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:09.253139019 CET	53	65498	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:10.317939043 CET	53	56918	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:10.775970936 CET	65245	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:10.776238918 CET	50202	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:10.863439083 CET	53	65245	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:10.905590057 CET	53	50202	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:13.032346010 CET	56722	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:13.032643080 CET	52768	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:13.039483070 CET	53	56722	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:13.039664984 CET	53	52768	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:23.861726999 CET	62324	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:23.861850977 CET	49578	53	192.168.2.4	1.1.1.1
Nov 20, 2024 07:37:23.892332077 CET	53	62324	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:23.933437109 CET	53	49578	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:25.695692062 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 07:37:27.385591984 CET	53	56143	1.1.1.1	192.168.2.4
Nov 20, 2024 07:37:46.462342978 CET	53	60584	1.1.1.1	192.168.2.4
Nov 20, 2024 07:38:08.510699987 CET	53	51183	1.1.1.1	192.168.2.4
Nov 20, 2024 07:38:09.179792881 CET	53	63754	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 07:37:10.905729055 CET	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable
Nov 20, 2024 07:37:23.933507919 CET	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 07:37:10.775970936 CET	192.168.2.4	1.1.1.1	0xa250	Standard query (0)	www.luigimarzo.it	A (IP address)	IN (0x0001)	false
Nov 20, 2024 07:37:10.776238918 CET	192.168.2.4	1.1.1.1	0x3e9	Standard query (0)	www.luigimarzo.it	65	IN (0x0001)	false
Nov 20, 2024 07:37:13.032346010 CET	192.168.2.4	1.1.1.1	0x5735	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 07:37:13.032643080 CET	192.168.2.4	1.1.1.1	0x7e1a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 07:37:23.861726999 CET	192.168.2.4	1.1.1.1	0x4080	Standard query (0)	www.luigimarzo.it	A (IP address)	IN (0x0001)	false
Nov 20, 2024 07:37:23.861850977 CET	192.168.2.4	1.1.1.1	0x441c	Standard query (0)	www.luigimarzo.it	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 07:37:10.863439083 CET	1.1.1.1	192.168.2.4	0xa250	No error (0)	www.luigimarzo.it	89.46.106.37	A (IP address)	IN (0x0001)	false
Nov 20, 2024 07:37:13.039483070 CET	1.1.1.1	192.168.2.4	0x5735	No error (0)	www.google.com	216.58.212.164	A (IP address)	IN (0x0001)	false
Nov 20, 2024 07:37:13.039664984 CET	1.1.1.1	192.168.2.4	0x7e1a	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 20, 2024 07:37:23.892332077 CET	1.1.1.1	192.168.2.4	0x4080	No error (0)	www.luigimarzo.it	89.46.106.37	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.luigimarzo.it

fs.microsoft.com

https:

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	89.46.106.37	443	4924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:11 UTC	681	OUT	GET /wp-admin/css/anti.php HTTP/1.1 Host: www.luigimarzo.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 06:37:13 UTC	435	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Wed, 20 Nov 2024 06:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja; path=/ X-ServerName: webx.aruba.it X-Aruba-Cache: MISS Alt-Svc: h3=":443"; ma=86400
2024-11-20 06:37:13 UTC	78	IN	Data Raw: 33 30 0d 0a 3c 73 63 72 69 70 74 3e 61 6c 65 72 74 28 27 50 6c 65 61 73 65 20 52 65 66 72 65 73 68 20 54 68 69 73 20 50 61 67 65 20 41 66 74 65 72 20 31 30 0d 0a 65 0d 0a 6d 69 6e 27 29 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 30<script>alert('Please Refresh This Page After 10emin')</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 06:37:14 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=36490 Date: Wed, 20 Nov 2024 06:37:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 06:37:15 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=36450 Date: Wed, 20 Nov 2024 06:37:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 06:37:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	89.46.106.37	443	4924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:21 UTC	657	OUT	GET /favicon.ico HTTP/1.1 Host: www.luigimarzo.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.luigimarzo.it/wp-admin/css/anti.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
2024-11-20 06:37:22 UTC	400	IN	HTTP/1.1 302 Found Server: aruba-proxy Date: Wed, 20 Nov 2024 06:37:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Link: <https://www.luigimarzo.it/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://www.luigimarzo.it/wp-content/uploads/2022/02/cropped-LOGO-32x32.png X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rFlN+E+E1fcG+en&MD=xfmbMTlb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 06:37:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9d1de13a-e098-4508-89a2-b839b3aa1338 MS-RequestId: 8737128a-5173-41ae-bf9e-cbed1358bc0a MS-CV: Rfq8nlzcW0Gca1C9.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 06:37:21 GMT Connection: close Content-Length: 24490
2024-11-20 06:37:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 06:37:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	89.46.106.37	443	4924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:23 UTC	695	OUT	GET /wp-content/uploads/2022/02/cropped-LOGO-32x32.png HTTP/1.1 Host: www.luigimarzo.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.luigimarzo.it/wp-admin/css/anti.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
2024-11-20 06:37:23 UTC	270	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Wed, 20 Nov 2024 06:37:23 GMT Content-Type: image/png Content-Length: 3026 Connection: close Last-Modified: Mon, 03 Oct 2022 14:46:05 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2024-11-20 06:37:23 UTC	3026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0b 84 49 44 41 54 58 85 95 97 6b 6c 94 d5 ba c7 7f 6b cd 3b 17 66 da b9 b4 d0 4e 2f c3 c0 4c 9d 96 16 2a 77 0a 14 b5 a0 18 45 93 9d a8 31 9a 1d 2f 39 1a 3d 86 83 39 31 18 85 04 3f 10 72 3e 79 39 d9 4a 11 b2 a9 d8 e0 25 9a f8 49 11 83 e0 f1 58 d8 14 dc a0 02 29 ed d0 8e 2d ed f4 de b9 b6 9d 77 de 79 d7 f9 b0 0f 13 3d 1e f7 3e 67 7d 7b df 67 65 fd ff 6b 3d cf f3 7f 9e 47 f0 7f 58 c7 8f 1f b7 9d 3e 7d ba 2e 95 4a 6d d2 75 7d 8b 52 aa 25 9b cd ba 81 12 a5 d4 ac 52 2a 65 b7 db 47 ad 56 eb 5f 6d 36 db 85 b2 b2 b2 8b db b7 6f ef 7f e4 91 47 f4 7f 74 b6 f8 7b c6 57 5e 79 c5 06 34 0e 0c 0c fc 6b 3a Data Ascii: PNGIHDR szzpHYs+IDATXklk;fN/LwE1/9=91?r>y9J%IX)-wy=>g}{gek=GX>}.Jmu}R%ReGV_m6oGt{W^y4k:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	89.46.106.37	443	4924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:37:24 UTC	436	OUT	GET /wp-content/uploads/2022/02/cropped-LOGO-32x32.png HTTP/1.1 Host: www.luigimarzo.it Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=iafas3jlhlmksct72ctharm7ja
2024-11-20 06:37:24 UTC	270	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Wed, 20 Nov 2024 06:37:24 GMT Content-Type: image/png Content-Length: 3026 Connection: close Last-Modified: Mon, 03 Oct 2022 14:46:05 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2024-11-20 06:37:24 UTC	3026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0b 84 49 44 41 54 58 85 95 97 6b 6c 94 d5 ba c7 7f 6b cd 3b 17 66 da b9 b4 d0 4e 2f c3 c0 4c 9d 96 16 2a 77 0a 14 b5 a0 18 45 93 9d a8 31 9a 1d 2f 39 1a 3d 86 83 39 31 18 85 04 3f 10 72 3e 79 39 d9 4a 11 b2 a9 d8 e0 25 9a f8 49 11 83 e0 f1 58 d8 14 dc a0 02 29 ed d0 8e 2d ed f4 de b9 b6 9d 77 de 79 d7 f9 b0 0f 13 3d 1e f7 3e 67 7d 7b df 67 65 fd ff 6b 3d cf f3 7f 9e 47 f0 7f 58 c7 8f 1f b7 9d 3e 7d ba 2e 95 4a 6d d2 75 7d 8b 52 aa 25 9b cd ba 81 12 a5 d4 ac 52 2a 65 b7 db 47 ad 56 eb 5f 6d 36 db 85 b2 b2 b2 8b db b7 6f ef 7f e4 91 47 f4 7f 74 b6 f8 7b c6 57 5e 79 c5 06 34 0e 0c 0c fc 6b 3a Data Ascii: PNGIHDR szzpHYs+IDATXklk;fN/LwE1/9=91?r>y9J%IX)-wy=>g}{gek=GX>}.Jmu}R%ReGV_m6oGt{W^y4k:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:00 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rFlN+E+E1fcG+en&MD=xfmbMTlb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 06:38:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 45f6101f-a279-4905-8ae0-b735bc132ff0 MS-RequestId: e907fa46-99e4-4dd7-82a7-f121a0a102a9 MS-CV: EdvSTODE+USTSyUa.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 06:38:00 GMT Connection: close Content-Length: 30005
2024-11-20 06:38:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 06:38:01 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:03 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:03 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:03 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063803Z-1777c6cb754lv4cqhC1TEB13us000000094g00000000g190 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:03 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 06:38:03 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063804Z-r1d97b995774n5h6hC1TEBvf8400000008b000000000k7m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063804Z-185f5d8b95crl6swhC1NYC3ueg0000000a0g000000009vm0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063804Z-r1d97b995774zjnrhC1TEBv1ww00000008hg000000000wn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d9470d89-501e-0047-17f3-3ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063804Z-185f5d8b95cqnkdjhC1NYCm8w800000009u00000000018x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063804Z-185f5d8b95c9mqtvhC1NYCghtc00000009v000000000n15v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-185f5d8b95cx9g8lhC1NYCtgvc000000025000000000e6q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e563634e-601e-000d-3bed-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-185f5d8b95csd4bwhC1NYCq7dc00000009ug0000000067dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-1777c6cb754lvj6mhC1TEBke9400000009a0000000006r82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-1777c6cb754xlpjshC1TEBv8cc000000097000000000s0u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-1777c6cb7544n7p6hC1TEByvb400000009b000000000948z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-1777c6cb754lv4cqhC1TEB13us000000093g00000000m79n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-1777c6cb754dqf99hC1TEB5nps000000090g00000000e765 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-r1d97b99577brct2hC1TEBambg000000023000000000fa05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-185f5d8b95csp6jmhC1NYCwy6s00000009q000000000q3hs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063805Z-185f5d8b95csd4bwhC1NYCq7dc00000009rg00000000dve9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:06 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:06 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063806Z-185f5d8b95csd4bwhC1NYCq7dc00000009qg00000000gqz9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:06 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:06 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0bcc5563-701e-0021-03f3-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063806Z-185f5d8b95cgrrn8hC1NYCgwh400000009qg00000000bgh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:06 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063806Z-1777c6cb7544n7p6hC1TEByvb400000009cg000000006hah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:06 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063806Z-185f5d8b95crl6swhC1NYC3ueg00000009wg00000000rwap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:06 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:06 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063806Z-185f5d8b95cdtclvhC1NYC4rmc00000009w000000000qshh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:06 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:07 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063807Z-185f5d8b95cp7lkfhC1NYC7rpw0000000a1g00000000552e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:07 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063807Z-r1d97b99577sdxndhC1TEBec5n00000008mg000000007tyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:07 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063807Z-185f5d8b95c68cvnhC1NYCfn7s00000009v000000000c5at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:07 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063807Z-185f5d8b95csd4bwhC1NYCq7dc00000009qg00000000gqzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:07 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:07 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063807Z-185f5d8b95cgrrn8hC1NYCgwh400000009r000000000a4bc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:07 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-1777c6cb754mrj2shC1TEB6k7w00000009b000000000axp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-185f5d8b95csd4bwhC1NYCq7dc00000009tg000000008n9v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-1777c6cb754g9zd5hC1TEBfvpw00000009cg0000000064uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-1777c6cb754gc8g6hC1TEB966c0000000980000000005nnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-185f5d8b95ctl8xlhC1NYCn94g0000000a1g0000000006kk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-1777c6cb754ww792hC1TEBzqu4000000093g0000000062xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-185f5d8b95c68cvnhC1NYCfn7s00000009wg0000000070ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-185f5d8b95csp6jmhC1NYCwy6s00000009s000000000gn9e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-1777c6cb754whff4hC1TEBcd6c00000007v000000000azcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:08 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063808Z-r1d97b9957789g82hC1TEBstx000000008g0000000005kmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:09 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:09 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063809Z-r1d97b99577ckpmjhC1TEBrzs000000008eg00000000esk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:09 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063809Z-r1d97b995777mdbwhC1TEBezag00000008bg00000000hr4g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:09 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063809Z-185f5d8b95c96jn4hC1NYCbgp800000009rg00000000r0q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:09 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:09 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063809Z-185f5d8b95cgrrn8hC1NYCgwh400000009r000000000a4e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:09 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:09 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063809Z-1777c6cb754xrr98hC1TEB3kag000000094g0000000039p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:09 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:10 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:10 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063810Z-1777c6cb754gvvgfhC1TEBz4rg000000099g000000008u1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:10 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:10 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:10 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063810Z-185f5d8b95cx9g8lhC1NYCtgvc00000002900000000034ue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:10 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:10 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063810Z-185f5d8b95c4bhwphC1NYCs8gw00000009y000000000edhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:10 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:10 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063810Z-1777c6cb754ww792hC1TEBzqu4000000091000000000by2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:10 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:10 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063810Z-r1d97b99577ndm4rhC1TEBf0ps00000008q0000000002mnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-1777c6cb754lv4cqhC1TEB13us000000095000000000euq2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 35891a85-601e-0070-700c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-1777c6cb754wcxkwhC1TEB3c6w000000091000000000nnz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-185f5d8b95crwqd8hC1NYCps6800000009vg000000008ahn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-185f5d8b95c4vwv8hC1NYCy4v40000000a1g000000004ybd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-1777c6cb754xrr98hC1TEB3kag000000091000000000bd2b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-r1d97b99577hsvhhhC1TEByb1w00000002vg000000002579 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-r1d97b99577ndm4rhC1TEBf0ps00000008k000000000ap4k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:11 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063811Z-185f5d8b95cdtclvhC1NYC4rmc0000000a2g000000002pme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-185f5d8b95cjbkr4hC1NYCeu2400000009rg000000007hvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-1777c6cb754xrr98hC1TEB3kag00000008yg00000000knd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-1777c6cb7549x5qchC1TEBggbg000000099g000000008b6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ccd0155-401e-0015-24f2-3a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-r1d97b99577n5jhbhC1TEB74vn00000008f000000000774z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-185f5d8b95c95vpshC1NYC759c00000009w0000000009f69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-r1d97b99577sdxndhC1TEBec5n00000008hg00000000c5ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:12 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:12 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063812Z-r1d97b995778dpcthC1TEB4b5400000008d0000000006fza x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:12 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:13 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:13 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: ccb8f84a-f01e-00aa-75f2-3a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063813Z-185f5d8b95crwqd8hC1NYCps6800000009rg00000000nw8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:13 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:13 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063813Z-1777c6cb7542p5p4hC1TEBq098000000095g00000000dru5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:13 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 54f20451-201e-0000-5511-3ba537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063813Z-r1d97b99577gg97qhC1TEBcrf4000000086000000000m84x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:13 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:13 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063813Z-1777c6cb754b7tdghC1TEBwwa400000009eg0000000010kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:13 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:13 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063813Z-r1d97b995774n5h6hC1TEBvf8400000008k00000000015v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063814Z-185f5d8b95cmd8vfhC1NYC0g4000000005n000000000nnm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:14 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063814Z-r1d97b99577brct2hC1TEBambg000000024000000000c45x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:14 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063814Z-185f5d8b95cwtv72hC1NYC141w00000009pg00000000ks9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063814Z-1777c6cb754wcxkwhC1TEB3c6w000000091000000000np5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063814Z-185f5d8b95ctl8xlhC1NYCn94g00000009v000000000m3zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-185f5d8b95cmd8vfhC1NYC0g4000000005tg00000000647u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-1777c6cb7549j9hhhC1TEBzmcc000000093g00000000cc6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:14 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-185f5d8b95cdtclvhC1NYC4rmc00000009zg00000000apyt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-r1d97b99577ckpmjhC1TEBrzs000000008kg000000004ts1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-r1d97b99577dd2gchC1TEBz5ys000000086000000000kf43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-r1d97b99577dd2gchC1TEBz5ys00000008d0000000001qs2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-1777c6cb754dqf99hC1TEB5nps00000008yg00000000kzh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-185f5d8b95cqnkdjhC1NYCm8w800000009s00000000061wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-r1d97b995774n5h6hC1TEBvf8400000008b000000000k7w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:15 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:15 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:15 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063815Z-185f5d8b95csp6jmhC1NYCwy6s00000009xg000000000bh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:16 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:16 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063816Z-1777c6cb754g9zd5hC1TEBfvpw00000009cg0000000065rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:16 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:16 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063816Z-1777c6cb7544n7p6hC1TEByvb4000000099000000000g0rn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:16 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063816Z-1777c6cb754mrj2shC1TEB6k7w00000009a000000000dbsa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:16 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:16 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063816Z-r1d97b99577ckpmjhC1TEBrzs000000008mg000000002pq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:16 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063816Z-r1d97b995778dpcthC1TEB4b5400000008e0000000004kq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-r1d97b99577sdxndhC1TEBec5n00000008m0000000009ada x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:17 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-185f5d8b95c9mqtvhC1NYCghtc00000009v000000000n1qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:17 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-1777c6cb754xrr98hC1TEB3kag0000000940000000004d1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:17 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-r1d97b99577sdxndhC1TEBec5n00000008m0000000009adn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:17 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-185f5d8b95crl6swhC1NYC3ueg00000009wg00000000rwq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:17 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:17 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063817Z-185f5d8b95cgrrn8hC1NYCgwh400000009n000000000mqd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:17 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-185f5d8b95cwtv72hC1NYC141w00000009vg0000000021qx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-185f5d8b95cmd8vfhC1NYC0g4000000005u0000000003r7d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-185f5d8b95cx9g8lhC1NYCtgvc000000024g00000000hhax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-r1d97b99577d6qrbhC1TEBux5s00000008m000000000agvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-r1d97b9957789g82hC1TEBstx000000008b000000000gtxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-r1d97b995774zjnrhC1TEBv1ww00000008d000000000arf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-r1d97b99577jlrkbhC1TEBq8d000000008cg000000006qhk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-185f5d8b95c95vpshC1NYC759c00000009s000000000p4m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063818Z-1777c6cb754lvj6mhC1TEBke94000000096000000000k3uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:19 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063819Z-1777c6cb754n67brhC1TEBcp9c000000098g00000000awe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:19 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:19 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063819Z-1777c6cb754j47wfhC1TEB5wrw00000004yg00000000n6zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:19 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:19 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063819Z-185f5d8b95cmd8vfhC1NYC0g4000000005pg00000000f0d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:19 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:19 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063819Z-1777c6cb754g9zd5hC1TEBfvpw00000009eg00000000192q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:19 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:19 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063819Z-185f5d8b95cdh56ghC1NYCk1x400000003p000000000cegm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:20 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:20 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063820Z-1777c6cb7544nvmshC1TEBf7qc00000009400000000027cb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:20 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:20 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063820Z-185f5d8b95ctl8xlhC1NYCn94g00000009y0000000009ymt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:20 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:20 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063820Z-1777c6cb754rz2pghC1TEBghen0000000970000000001bhq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:20 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:20 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063820Z-r1d97b9957789g82hC1TEBstx000000008hg000000001tnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:20 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ccaf292f-701e-0001-41fa-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063820Z-r1d97b99577hc74hhC1TEBvbns00000008bg0000000082gh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95cwtv72hC1NYC141w00000009r000000000fyar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95cwtv72hC1NYC141w00000009r000000000fyat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95cf7qddhC1NYC66an0000000a0g000000001gkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-r1d97b99577sdxndhC1TEBec5n00000008r00000000005h3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95ckwnflhC1NYCx9qs0000000a00000000002ncx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95crl6swhC1NYC3ueg00000009wg00000000rwu6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-1777c6cb7544nvmshC1TEBf7qc000000090000000000d39m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 2cc38358-d01e-002b-43fb-3a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-r1d97b99577mrt4rhC1TEBftkc00000008ag00000000cm74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:21 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:21 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 06bc2162-901e-0016-6af6-3aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063821Z-185f5d8b95cx9g8lhC1NYCtgvc000000027g000000007dub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-r1d97b995777mdbwhC1TEBezag00000008e000000000a02y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-185f5d8b95c4hl5whC1NYCeex000000009r000000000ef6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-185f5d8b95c9mqtvhC1NYCghtc00000009u000000000q47f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-1777c6cb754j8gqphC1TEB5bf8000000095g000000006f8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-1777c6cb754lv4cqhC1TEB13us000000093000000000n5h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:22 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063822Z-1777c6cb754lv4cqhC1TEB13us000000098g000000004hgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:23 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:23 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063823Z-185f5d8b95c9mqtvhC1NYCghtc00000009xg00000000b7p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:23 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:23 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063823Z-r1d97b99577ndm4rhC1TEBf0ps00000008fg00000000ggsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:23 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063823Z-1777c6cb7544n7p6hC1TEByvb4000000098g00000000k12t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:23 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:23 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063823Z-r1d97b99577hc74hhC1TEBvbns00000008d000000000492s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:23 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:23 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a615b14a-d01e-008e-6e8c-3a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063823Z-185f5d8b95c95vpshC1NYC759c00000009ug00000000d9q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-1777c6cb7549x5qchC1TEBggbg000000097000000000fyv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-1777c6cb754xjpthhC1TEBexs8000000091g00000000bfac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-r1d97b99577mrt4rhC1TEBftkc00000008c0000000008f2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-1777c6cb754gc8g6hC1TEB966c000000093g00000000mgnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-r1d97b9957789g82hC1TEBstx000000008c000000000dvua x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 107b52fc-c01e-00a2-5b8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-1777c6cb754rz2pghC1TEBghen0000000940000000009btc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e99758fe-d01e-0065-348c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-1777c6cb754lv4cqhC1TEB13us000000097000000000999w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:24 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:24 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6d467d74-a01e-0050-5286-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063824Z-185f5d8b95crwqd8hC1NYCps6800000009x0000000004p8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:24 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:25 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:25 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 833ec9a8-a01e-0053-6b0e-3b8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063825Z-1777c6cb7544n7p6hC1TEByvb4000000097g00000000qedu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 06:38:25 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:25 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 1ebeca68-b01e-0002-5b8c-3a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063825Z-185f5d8b95c9mqtvhC1NYCghtc00000009ug00000000md2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:25 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 06:38:25 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 06:38:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 06:38:25 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 270c322f-601e-00ab-4d8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T063825Z-1777c6cb7549j9hhhC1TEBzmcc000000094000000000azqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 06:38:25 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5088, Parent PID: 2568

General

Target ID:	0
Start time:	01:37:02
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4924, Parent PID: 5088

General

Target ID:	2
Start time:	01:37:07
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1968,i,3258528612734125222,8217063919986605666,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6364, Parent PID: 2568

General

Target ID:	3
Start time:	01:37:09
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.luigimarzo.it/wp-admin/css/anti.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.luigimarzo.it/wp-admin/css/anti.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5088, Parent PID: 2568

General

Chronological Activities

Analysis Process: chrome.exePID: 4924, Parent PID: 5088

General

Chronological Activities

Analysis Process: chrome.exePID: 6364, Parent PID: 2568

General

Chronological Activities

Disassembly

Windows Analysis Report
https://www.luigimarzo.it/wp-admin/css/anti.php