Edit tour

Windows Analysis Report
https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2

Overview

General Information

Sample URL:	https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJO
Analysis ID:	1559581
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1968,i,15999626710381135891,11917695017271450622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Nov 2024 16:27:25 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeCF-Ray: 8e59ceaaae438cab-EWRCF-Cache-Status: EXPIREDCache-Control: public, max-age=300ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"Strict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-EncodingX-Auth0-L: 0.002X-Auth0-Not-Found: 1X-Auth0-RequestId: d4e36e3473ee2a0acbcbX-Content-Type-Options: nosniffServer: cloudflarealt-svc: h3=":443"; ma=86400

Source: chromecache_73.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_73.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_67.2.dr, chromecache_70.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.161.164:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49815 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/24@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1968,i,15999626710381135891,11917695017271450622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1968,i,15999626710381135891,11917695017271450622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://signin.techinsights.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.181.68	true	false	high
techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com	104.19.168.24	true	false	unknown
dp0wn1kjwhg75.cloudfront.net	18.165.217.42	true	false	high
signin.techinsights.com	unknown	unknown	false	unknown
cdn.auth0.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.auth0.com/backend-templates/main.js?v=1	false		high
https://cdn.auth0.com/backend-templates/imgs/error-mouth.svg	false		high
https://cdn.auth0.com/backend-templates/main.css	false		high
https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-regular-italic.woff2	false		high
https://signin.techinsights.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-medium.woff2	false		high
https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ	false		unknown
https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-regular.woff2	false		high
https://cdn.auth0.com/styleguide/latest/index.min.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://opensource.org/licenses/MIT	chromecache_73.2.dr	false	high
http://daneden.me/animate	chromecache_73.2.dr	false	high
http://www.bohemiancoding.com/sketch	chromecache_67.2.dr, chromecache_70.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
18.165.217.42	dp0wn1kjwhg75.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.19.168.24	techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559581
Start date and time:	2024-11-20 17:26:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/24@8/5

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 142.250.181.142, 64.233.165.84, 34.104.35.123, 93.184.221.240, 192.229.221.95, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=ap

Input	Output
URL: https://signin.techinsights.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://signin.techinsights.com
URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "unauthorized: The verification code has expired. Please try to login again.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Oops!, something went wrong", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "brands": [ "Techinsights-auth2" ] }
	{ "brands": [ "Techinsights-auth2" ] }
URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "brands": [ "techinsights-auth2" ] }
	{ "brands": [ "techinsights-auth2" ] }
URL: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Model: Joe Sandbox AI	{ "brands": [ "techinsights-auth2" ] }
	{ "brands": [ "techinsights-auth2" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 15:27:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.967680527953598
Encrypted:	false
SSDEEP:	48:8OdTTbXsH4idAKZdA19ehwiZUklqehqy+3:86nLFy
MD5:	FD6B9339715A2ED841AEC2C74AE362CA
SHA1:	8A9EABF4E96CFF8EAD712C89A56723A0BCA9115B
SHA-256:	ED6A61ABE686C98756DC51DA91D4741E892C24E32F1A843AD2E1F01B7BB0374B
SHA-512:	CD9BE2BC91C3A18B593DD6A52D5B74B00684BD646983BC34C28B7C6F7D36686B2FBDE4C875674184A800CF1A3E7DE1CDD80E8DAB06A79B8002A15F330AC7A9BC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....S..i;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYe............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 15:27:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9831200228149037
Encrypted:	false
SSDEEP:	48:82/dTTbXsH4idAKZdA1weh/iZUkAQkqeh1y+2:8Qn59QYy
MD5:	5E18216CE836FA552376920D3894F3F5
SHA1:	9CFD31F96102D883C29A9DD428464AE8F6F78857
SHA-256:	3FE2A0322EC35AE70C786F4035D0A7995B4685747D63EABCD66FEBEBA7C69DB9
SHA-512:	1B36C903D270B882C274E79C6B9088237DE74B77344084FCBDBCC9F4D65A8A799C616B1CC6D126B728D67B6F5758FFAAE8C16E5920F948095FFB261B89FF3D3A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E\|..i;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYe............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9989856231766607
Encrypted:	false
SSDEEP:	48:8xgdTTbXsH4idAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xEnJnBy
MD5:	AAF8E3583374C821104F2230B2E749A7
SHA1:	947388AD3874FB4A4C63989BEF2825FBC937C972
SHA-256:	0852166E0F4D79623A5B8420CC845866D707C871F970ACD3EBCDBDC98CF73654
SHA-512:	B7519FECFF79642C5FF28BAA1990C90D220FEEB6F98C92D278417CBDDC2D6A85D903494545ECC2AC87196DAD445CA0ED1841221F2A146BFF35C2CF99702C61A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 15:27:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9793083815276376
Encrypted:	false
SSDEEP:	48:8VdTTbXsH4idAKZdA1vehDiZUkwqehJy+R:8bnajy
MD5:	5E9671B3C8888F737B89908DCE6BA5A6
SHA1:	BF8499913472D3282580AD069E5B295A6032D072
SHA-256:	70483D20F6D03EA522CCF3ADBE30CEEF1F5CDC4E5D45A2C3BFA45F0773A57960
SHA-512:	C7628540A2FC1B3C2DB35EEE41ACFD6CD184A7A86519561147AE71FFCB5C1266963F760545B126AC8D05B9F817E8D03DFAE57CFE7E721EBB46BEBA42A500370A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X\..i;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYe............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 15:27:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.971684456763948
Encrypted:	false
SSDEEP:	48:8hdTTbXsH4idAKZdA1hehBiZUk1W1qehHy+C:8Pna9ny
MD5:	7C32EEDE31F18FE5870664346C03869B
SHA1:	7D3AF661C9974C2876C3510FB1DBA031F7BAF3EA
SHA-256:	54422678F040AACE2BBD4463E0CF794C7F587341DEFB2A71A56CB64087CFA115
SHA-512:	ECF9F1962DF7CA41DF9B1E3A7BD22031B6EB56DD9C3814715642F8BE403D34DBB0B838525C06EF8DCBAEA937086FED0698804E1A9ADB780657FA3937A108D57E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........i;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYe............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 15:27:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9850696444817753
Encrypted:	false
SSDEEP:	48:8XadTTbXsH4idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbBy+yT+:8enkT/TbxWOvTbBy7T
MD5:	73B162F698E9DEDBC0FE14C12004AA99
SHA1:	015E9F0A533035937E7370F10D8F2DFE2CF39E0E
SHA-256:	CBEA85413221F75ADBCA6894F009B4DD03FC88C1E9F1E16BC3E92CE4500CEEAE
SHA-512:	DB150CEE9A0943D0EECF35CABC9C5E3EF65569B9AF440895C4FB856BF71A23BBC4094A27D4010EA02E83AD6D80EFB3BBE977E92D036D3D9B419048626694E811
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........i;..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItYb.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtYb.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtYb.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtYb............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtYe............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............VO.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:Obn:Obn
MD5:	9D1EAD73E678FA2F51A70A933B0BF017
SHA1:	D205CBD6783332A212C5AE92D73C77178C2D2F28
SHA-256:	0019DFC4B32D63C1392AA264AED2253C1E0C2FB09216F8E2CC269BBFB8BB49B5
SHA-512:	935B3D516E996F6D25948BA8A54C1B7F70F7F0E3F517E36481FDF0196C2C5CFC2841F86E891F3DF9517746B7FB605DB47CDDED1B8FF78D9482DDAA621DB43A34
Malicious:	false
Reputation:	low
URL:	https://signin.techinsights.com/favicon.ico
Preview:	Not Found

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33116, version 1.0
Category:	downloaded
Size (bytes):	33116
Entropy (8bit):	7.993670908017883
Encrypted:	true
SSDEEP:	768:6/0o99IGSpp9CsjuEvd8kaOb6z7/vDxn4mhtfkxeC:e0oTIGSDvd8k1C/vDxn4mDMx7
MD5:	D97F2F7C6CBA5C5250A56DA8DF848E23
SHA1:	BB3E6A06CCF75ACD9499BF91F3168BB5982F0533
SHA-256:	DCC69817E6231784436B3DD693D9715F62466A5E7CBC8B2036C74DF28FB7E4B0
SHA-512:	36D955A9B25E1DAE047483BCFA283E12C2B165AD962F2369F3F29BE090EF5213DE03A587BD1D65BBA71157D6B105B16816270156A8AD475F165F054AEED7B9FD
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-regular-italic.woff2
Preview:	wOF2.......\.........................................D.`..`...........O.6.$..h..(..l.. .... [.Tq$..}E....u.{npD...Q...5....uAuK..t..~l.39........q...}..=..M["...D....{.f...=..f.L.]..hI.`..I%..&....tLi.....l..PM...#$._..:.....3{T...L.EE)HQ.....hn.QO.bo~...G..u.O3W.P.7..Q,....$..^....C......3..A....zAgY..5.....1.^...1.kp@H#..Yd.MB.........-..2`..m..F..=..."Z..Si"F.6.).....J..).i...h...8JE....mL.i..m..&.I.N).o1/..(..~j.9r...!..UNK..n...........H.d...eWu..?.W..p..IMP.P.....$.>...A.(.:.t.FT....v%.;j........>a>........r..Uu.=~\|..h.?g.;.7DB2Z.P.P.\|~......R~#..!WU.k.......&.'za..,Z....z....D.f.Q..(4.%t#.S.) n'...z.....Q....2V...~2.X=..)...5......F..1..[fKi..6.T@.B....t^...../....n*.Y.X.e...e......4I..8bQG.....Ul.t...(....l.).).VecM\|o.....!e.yrtzFqRKW..,..57....J,..P%....s..~...._y...8.:&dqc.b@...:&((..83E6\|.oZKUg.>H.!..9YV.....m3....~B...{mV...a.L...../Ivu..'..z..2l5...\|.....P..ORU}..L.....J...."a.jEny>wz....?..,M.tY...3...J%_....N.@ .../5.=:..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	698
Entropy (8bit):	4.610074414760259
Encrypted:	false
SSDEEP:	12:uSoUa6dAldHWIorHX2ifuLGQ5FNtI9L7oeAlFduGL52WPL77eAlFz5:1eckHLmHK6QTNteL4FAG12WPLlFz5
MD5:	0F81E3B9236C8FFC79C7CC852A54F38D
SHA1:	983FDD2CC6990580AA487CC5F9714C2A8A028086
SHA-256:	F10F0982087C01DE72C16BAF674D8107D41D10ECFF66667B0F7B0890EF52EDD1
SHA-512:	1DA78254E56935A83C780CB5307B600B54A0F61B474FB98ED32BF3E85D2D1CBB66E69325CF4F1851011D850FA3A4152862574EFB070C276F71DDB8E2BB82FB94
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/backend-templates/main.js?v=1
Preview:	document.addEventListener('DOMContentLoaded', function() {. var toggle = document.querySelector('.error-footer .toggle-details');. var details = document.querySelector('.error-details');.. toggle.addEventListener('click', function(e) {. e.preventDefault();. if (!details.classList.contains('active')) {. details.classList.remove('fadeOut');. details.classList.add('active', 'animated', 'fadeIn');. toggle.classList.add('active');. toggle.textContent = 'Hide details for this error';. } else {. details.classList.remove('fadeIn', 'active');. toggle.classList.remove('active');. toggle.textContent = 'See details for this error';. }. });.}, false);.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.288222200735639
Encrypted:	false
SSDEEP:	24:2dt1PyLHqv/FOeFeaxMcbdfA6KR8D/vaXaU:c/GHk/l1MqyR
MD5:	8257BD740377EC86CEA453D1DFDA61FC
SHA1:	F0478FA4300D6680CFA5F51B871A97D93A9E7612
SHA-256:	9D8FFC1696A244AF4F1A0281079A342E752BB14CDB3C8CCDECCB30D0170EF85B
SHA-512:	B02DA579299C069D53677B5E2E0C01BA9ABDE6F662B14B2190AC2A33C0C65C150386802501596083F12FD062CE20C0E1C271D0695B6BBBD399798A258E7D65C7
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/backend-templates/imgs/error-mouth.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="19px" height="7px" viewBox="0 0 19 7" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.4.2 (15857) - http://www.bohemiancoding.com/sketch -->. <title>Path</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="Generic-Auth0" sketch:type="MSArtboardGroup" transform="translate(-503.000000, -108.000000)" fill="#16214D">. <g id="Oval-1-+-Fill-42-+-Fill-44" sketch:type="MSLayerGroup" transform="translate(467.000000, 59.000000)">. <path d="M45.5,49.2 C41.1895,49.2 37.5265,51.901 36.0465,55.675 L54.9535,55.675 C53.4735,51.901 49.8105,49.2 45.5,49.2 L45.5,49.2 Z" id="Path" sketch:type="MSShapeGroup"></path>. </g>. </g>. </g>.</

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32236, version 1.0
Category:	downloaded
Size (bytes):	32236
Entropy (8bit):	7.990874467886515
Encrypted:	true
SSDEEP:	768:h3zwdG/qY2ttB07L1hGpWGJQDIIHd1Bp7h9:haG/r2fiD4JQUI9199
MD5:	13068386FE66FD9AFD7E13E415885F50
SHA1:	0078DD7BE433E5D15478ECBBBCB3652C1C1EEAA1
SHA-256:	7444F8B2CCA0E59929913024A2CBDB33D7301B06407F94D62F5F2E5A835AC637
SHA-512:	C6F330013A7854D5516B2A2E880A8E9EBF801088B444C14D668A1AD162243C40C2763453D5EA0AB923372219904A13774655C8D504F36B5EF25091663BF56CCA
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-medium.woff2
Preview:	wOF2......}...........}..............................D.`..`...........F.6.$..h..z..l.. .... [.M....om/........0..q..a.sl....pA.[G.p.(...].Q.......D.L..%M..m.i...%...!SH..2..4g.T.}..*,...jk..lf#tEM./..ib;....`.7`b...`V..]h.g.Yp.:../.7&..b...E.....#T.?%,...v\|S...j.u.....^..s.7\).(72k.,.%$.S..R...h...P..:+..H.I.^5..d .(._H...........D.&-.:.E7.....`n.62..F.m..[........BA...H.......#..BA.^...d'.{.[.,.qO....I?.....3....,.}M...!@.......>./......./..DW..E2..wh.i'4.IK4J....d>g.t....~b.....7.....b.q[%<'.>.......@@../:.a.k.~...:.,@...$C.q...Y....L&.tRp.Fh....<.....V.%<..e,i.iC..e+9..6a..iE).H.r(A..........'@....4.$.~PI....,...............T.x.LC.k.2.Dt;.ov.o{...1.7......EY..vu....$..Y.^;.QH!...9......T" "B`P..T'b..p..-.!f.1.&.A..z.7u..v..[.z#........".....:..V..$.......(.^.........&N...9...".41H...L..5.......A".f..V..s...R.&......I...BK.t....m..~%......o...N.5Z..0VM..BmK]x^...<.L..az.....b.......2..o_K%k~..m......N.Ur..\|.....G..uXz....N.{..KV@..vJvQ..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	698
Entropy (8bit):	4.610074414760259
Encrypted:	false
SSDEEP:	12:uSoUa6dAldHWIorHX2ifuLGQ5FNtI9L7oeAlFduGL52WPL77eAlFz5:1eckHLmHK6QTNteL4FAG12WPLlFz5
MD5:	0F81E3B9236C8FFC79C7CC852A54F38D
SHA1:	983FDD2CC6990580AA487CC5F9714C2A8A028086
SHA-256:	F10F0982087C01DE72C16BAF674D8107D41D10ECFF66667B0F7B0890EF52EDD1
SHA-512:	1DA78254E56935A83C780CB5307B600B54A0F61B474FB98ED32BF3E85D2D1CBB66E69325CF4F1851011D850FA3A4152862574EFB070C276F71DDB8E2BB82FB94
Malicious:	false
Reputation:	low
Preview:	document.addEventListener('DOMContentLoaded', function() {. var toggle = document.querySelector('.error-footer .toggle-details');. var details = document.querySelector('.error-details');.. toggle.addEventListener('click', function(e) {. e.preventDefault();. if (!details.classList.contains('active')) {. details.classList.remove('fadeOut');. details.classList.add('active', 'animated', 'fadeIn');. toggle.classList.add('active');. toggle.textContent = 'Hide details for this error';. } else {. details.classList.remove('fadeIn', 'active');. toggle.classList.remove('active');. toggle.textContent = 'See details for this error';. }. });.}, false);.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1004
Entropy (8bit):	5.288222200735639
Encrypted:	false
SSDEEP:	24:2dt1PyLHqv/FOeFeaxMcbdfA6KR8D/vaXaU:c/GHk/l1MqyR
MD5:	8257BD740377EC86CEA453D1DFDA61FC
SHA1:	F0478FA4300D6680CFA5F51B871A97D93A9E7612
SHA-256:	9D8FFC1696A244AF4F1A0281079A342E752BB14CDB3C8CCDECCB30D0170EF85B
SHA-512:	B02DA579299C069D53677B5E2E0C01BA9ABDE6F662B14B2190AC2A33C0C65C150386802501596083F12FD062CE20C0E1C271D0695B6BBBD399798A258E7D65C7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="19px" height="7px" viewBox="0 0 19 7" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.4.2 (15857) - http://www.bohemiancoding.com/sketch -->. <title>Path</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g id="Generic-Auth0" sketch:type="MSArtboardGroup" transform="translate(-503.000000, -108.000000)" fill="#16214D">. <g id="Oval-1-+-Fill-42-+-Fill-44" sketch:type="MSLayerGroup" transform="translate(467.000000, 59.000000)">. <path d="M45.5,49.2 C41.1895,49.2 37.5265,51.901 36.0465,55.675 L54.9535,55.675 C53.4735,51.901 49.8105,49.2 45.5,49.2 L45.5,49.2 Z" id="Path" sketch:type="MSShapeGroup"></path>. </g>. </g>. </g>.</

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31944, version 1.0
Category:	downloaded
Size (bytes):	31944
Entropy (8bit):	7.992855141365486
Encrypted:	true
SSDEEP:	768:0TIF06pGxhljwNtmDMSkzY77TmIFhvhABqsgk6o5oJ8ZyqEta8:E39lPHvUqsgfuhEh
MD5:	851774DF81A3D857ED6D149E0B8E6C60
SHA1:	F53B3EC36A89885F4A06316E53C2237AA940684C
SHA-256:	3B110C9A55D7DE7315AEBC7D717EF510E2A717C5D8FBE26A749E2382F7B858D7
SHA-512:	AAF370AFEE4A71F2D909EE26EFCF62393DF9B53D565661E7259BD94C91B0054896522917C87106F991D3320094BFD5113FC8890717F4F87E4CC7621092AA7BD9
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/styleguide/latest/lib/font/avenir-next/avenir-next-regular.woff2
Preview:	wOF2......\|........L..\|i..........................~..D.`..`........<..\|.6.$..h..R..l.. ..(. [.Mq..].( (o`.L..<\...=C+....O......l:./Wzn3....d.....t...~@Y].w&.h......].g.P.q.QF.L\|....H..TH... &.... M...0.....L.V...y.)....&.......z.una5..9....j.#...j{.]...q?.r>r.}m..?.q.......$...X.N,..4.h.T./v ......M5.L-.......o..\6.y.o...! .. ..n...>.....~.lcD.0`....=z.J.uT..X.Vb.&V#F.....C.[.....).t..H.&.Rh.."..`..v..V,..N=k...S....x.vo....8ng...%..j.N..z.279^......@.....Y.ihZ(..(:.}.N....B.k.U.s{3K......C(.....MdrT....\|..4..<.]Rm..k..F..w.......d$..C.a.(...u!.....d.L..E..Q.2.........E.d...eV.Ap...:...o..a.m-./kY..?...Z...\|......).P%..%..3........s....o.3i3.....d..;...g..:.T.....mZ.l.._..........t.uD..&2... .."w.+!0..(M+C)b!.-S....J.....3...2.e..@a.nU.L..QW....Z...3.iZ2H.n......E..A"..(4R..nf.0.....@"....{....S...L.2.{......?..W).sC..R.6...C1h...}..6..6.Dh ..afk..6...2.=.x....Eh.......fr...?..\.7.(..\Ii......P..^.......>.&..c.'}..Q..Y(r.;...T.9.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10432
Entropy (8bit):	4.825754945501657
Encrypted:	false
SSDEEP:	192:6gzLQnVS6A9maFh6FTWV/Rc4otJ0RSiwU3FORRPrzgFJeAkVV175GYzSFwsGuQWx:6gzFa4h4U3F8VrzgFA717IfFwsV
MD5:	A0CFB67E0BB38ECCBFAD358B34EAE828
SHA1:	EF5ECF701F63552FD24C814992025074A189D2A2
SHA-256:	082C7DCAED1C848B1B6F7CA58609F1F0BC28C5797630B87AD9E2108C66C117D0
SHA-512:	3FA71FD14FEC204981953D2BC97C906DE6514FCB1659DACD6D6B7C79A8C9C43F3A51CF68B35504E1A9649A4DAEF65BE6CE84CB3FC7901CDD2165820E6490A64B
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/backend-templates/main.css
Preview:	body {. margin: 0;. padding: 0;. background-color: #f4f6f9;.}..cf:before,..cf:after {. content: " "; /* 1 /. display: table; / 2 */.}..cf:after {. clear: both;.}..unhandled-error-cont {. text-align: center;. overflow: hidden;. background-color: #e3e5e7;.}..unhandled-error-cont .error-header {. background-color: #2b2b33;. color: #fff;. padding: 50px 0;. width: 100%;.}..unhandled-error-cont .error-icon {. position: relative;. display: inline-block;. width: 90px;. height: 90px;. background-color: #fff;. border-radius: 50%;.}..unhandled-error-cont .error-face {. display: inline-block;. position: absolute;. top: 27px;. left: 27px;. height: 37px;. width: 37px;. background-color: #44c7f4;. border-radius: 50%;.}..unhandled-error-cont .error-face-eye {. content: '';. position: absolute;. display: inline-block;. width: 6px;. height: 6px;. background-color: #2b2b33;. border-radius: 50%;.}..unhandled-error-cont .error-face-eye.left-eye {. top: 10px;. left: 8px

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63861)
Category:	downloaded
Size (bytes):	259429
Entropy (8bit):	5.453547926140793
Encrypted:	false
SSDEEP:	6144:F9y6N2SftkDNohx3vuS2MZu58+uTHl92l6BALsRi:F9y6N2SftkDNohx3vuS2MZC8+uTHl921
MD5:	9357A87B18A1D356741527B43D110705
SHA1:	A6F5D1623A4772A1AB08EADA567B426588CC0513
SHA-256:	C10C601443EEB6D79100EACA7911AD24334CCB39F0861E697EA7F33684C35D86
SHA-512:	685016FA18F79D01B39F6FEA54FE90EBD776F8B7FE8C0C879D31E715692582A7BF53A088FD6FAB3F62EF91F4F40B69D8084D77D4E2FBADC0137E9FD5EC7C5C6C
Malicious:	false
Reputation:	low
URL:	https://cdn.auth0.com/styleguide/latest/index.min.css
Preview:	@charset "UTF-8";/!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2015 Daniel Eden./progress,sub,sup{vertical-align:baseline}.sr-only,svg:not(:root){overflow:hidden}button,hr,input,select{overflow:visible}body,figure{margin:0}[role=button],[type=button],[type=reset],[type=submit],button{cursor:pointer}.container-fluid:after,.container:after,.dl-horizontal dd:after,.form-horizontal .form-group:after,.row:after{clear:both}.animated{animation-duration:1s;animation-fill-mode:both}.animated.infinite{animation-iteration-count:infinite}.animated.hinge{animation-duration:2s}.animated.bounceIn,.animated.bounceOut,.animated.flipOutX,.animated.flipOutY{animation-duration:.75s}@keyframes bounce{0%,100%,20%,53%,80%{transition-timing-function:cubic-bezier(.215,.61,.355,1);transform:translate3d(0,0,0)}40%,43%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);transform:translate3d(0,-30px,0)}70%{transition-timing

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 17:26:58.640980005 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:26:58.640997887 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:26:58.765748024 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:27:08.244607925 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:27:08.359929085 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:27:08.463342905 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:27:09.980861902 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.980887890 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:09.980968952 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.981358051 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.981401920 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:09.981448889 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.983467102 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.983479977 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:09.983644962 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:09.983655930 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:10.794574976 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 17:27:10.794660091 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 17:27:11.256890059 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.257137060 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.257148027 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.258631945 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.258707047 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.259721994 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.259813070 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.259949923 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.259957075 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.262300014 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.262511969 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.262530088 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.263729095 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.263822079 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.265767097 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.265837908 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.299841881 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.315830946 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.315845966 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:11.362209082 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:11.761899948 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:11.761934996 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:11.761995077 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:11.762275934 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:11.762290001 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:12.085375071 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.085549116 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.085674047 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.087874889 CET	49710	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.087901115 CET	443	49710	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.088882923 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.131336927 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.675638914 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.675806999 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.675869942 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.677120924 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.677135944 CET	443	49709	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.677148104 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.677192926 CET	49709	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.678086996 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.678127050 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.678220034 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.678437948 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:12.678451061 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:12.955465078 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:12.955506086 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:12.955609083 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:12.957753897 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:12.957765102 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:13.554636955 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:13.554991961 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:13.555030107 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:13.556052923 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:13.556119919 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:13.558222055 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:13.558305025 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:13.603034973 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:13.603072882 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:13.653755903 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:13.993947029 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:13.994232893 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:13.994255066 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:13.994714022 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:13.995282888 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:13.995369911 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:13.995450974 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:14.043334961 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:14.324239016 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.324335098 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.329421043 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.329432964 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.329842091 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.370510101 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.379002094 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.419333935 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.691871881 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:14.692003965 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:14.692192078 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:14.692215919 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:14.692497969 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:14.696700096 CET	49714	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:14.696767092 CET	443	49714	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:14.939163923 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.939240932 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.939486980 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.939529896 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.939553976 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.939553976 CET	49715	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.939563990 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.939574957 CET	443	49715	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.957034111 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.957099915 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.957199097 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.957214117 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.957307100 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.957573891 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.957585096 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.957659960 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.957669973 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.958098888 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.958115101 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.958409071 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.958421946 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.958432913 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:14.958466053 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:14.989223003 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.989263058 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:14.989718914 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.989718914 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:14.989749908 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:16.513746977 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:16.513813972 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:16.520081043 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:16.520101070 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:16.520412922 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:16.522253036 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:16.567336082 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:16.848140955 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.870246887 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.870282888 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.871822119 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.871913910 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.881578922 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.881746054 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.881786108 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.886559963 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.886657953 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.890511036 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.890547037 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.890611887 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.890639067 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.891776085 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.891781092 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.891874075 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.891925097 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.892417908 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.892509937 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.893429041 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.893537998 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.893591881 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.893613100 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.893667936 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.893673897 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.923346043 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.934988976 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.935019970 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.935020924 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:16.935055017 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:16.981484890 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:17.050254107 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:17.050328016 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:17.050503016 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:17.051168919 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:17.051192999 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:17.051214933 CET	49719	443	192.168.2.5	2.23.161.164
Nov 20, 2024 17:27:17.051220894 CET	443	49719	2.23.161.164	192.168.2.5
Nov 20, 2024 17:27:18.432796001 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.439188957 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.456279993 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.456294060 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.456371069 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.456413031 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.456456900 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.456474066 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.456908941 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.456945896 CET	443	49716	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.457016945 CET	49716	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.463346958 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.463816881 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.463902950 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.464265108 CET	49717	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.464278936 CET	443	49717	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.479403973 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.671067953 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.671084881 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.671132088 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.671197891 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.671236038 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.709311008 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.709356070 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.709439993 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.709640026 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.709650993 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843063116 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843076944 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843111038 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843123913 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843139887 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843152046 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.843153954 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.843199968 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.843229055 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.878442049 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.878459930 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.878484011 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.878551006 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.878577948 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.878614902 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.935084105 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.935113907 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.935173988 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.935200930 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.935221910 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.935235977 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:18.943147898 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:18.994551897 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.051116943 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051136971 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051183939 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051215887 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051224947 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051223993 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.051270008 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.051289082 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.051289082 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.104691982 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.191740036 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.191757917 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.191814899 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.191833019 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.191854954 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.191890001 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.191970110 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.192008018 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.217211962 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.217278957 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.217299938 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.217317104 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.217340946 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.217422009 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.217458010 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.246134043 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.246248960 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.246270895 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.246287107 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.246342897 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.246342897 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.246342897 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.246433020 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275094986 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275156975 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275177002 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275192976 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275228024 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.275310993 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.275374889 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.304080963 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.304140091 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.304158926 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.304177046 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.304214001 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.304249048 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.304263115 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.344846964 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.344890118 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.344898939 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.344908953 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.344943047 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.344990969 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.345020056 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.372889996 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.372915983 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.372958899 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.372973919 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.372977972 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.373017073 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.373018980 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.373054028 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.376324892 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:19.376364946 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:19.376434088 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:19.377523899 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:19.377552986 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:19.415762901 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.424257994 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.424293995 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.424340963 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.424341917 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.424365044 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.424381971 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.424397945 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.424412966 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.424451113 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.428626060 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.428699970 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.437710047 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.437732935 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.437783957 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.437794924 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.437849998 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.437866926 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.439762115 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.439874887 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.439965963 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.440279007 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.440314054 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.447923899 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.447976112 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.447984934 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.448013067 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.448030949 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.457921982 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.457961082 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.458005905 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.458024979 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.458046913 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.459378958 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.459430933 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.459445953 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.459556103 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.459602118 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.460304022 CET	49718	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.460323095 CET	443	49718	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.511080027 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.511138916 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.511203051 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.511568069 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.511604071 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.511655092 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512026072 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512036085 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.512079954 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512293100 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512307882 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.512509108 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512521982 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:19.512670040 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:19.512681961 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.750849962 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.751147032 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:20.751215935 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.752155066 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.752224922 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:20.752985001 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:20.753053904 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.753253937 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:20.753271103 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:20.807421923 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.158682108 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:21.158763885 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:21.177887917 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:21.177907944 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:21.179030895 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:21.234417915 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:21.287753105 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.302057028 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.302860022 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.303726912 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.331593037 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.347657919 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.350522995 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.350522995 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.458688021 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.458712101 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.458808899 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.458822966 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.459074974 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.459083080 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.459368944 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.459428072 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.460062027 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.460131884 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.460356951 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.460403919 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.460418940 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.460510969 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.460830927 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.462280035 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.462341070 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.462904930 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.462985039 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.463706970 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.463799953 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.464221954 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.464404106 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.464447975 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.464447975 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.464456081 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.464456081 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.464512110 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.464519024 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.464685917 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.507344961 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:21.516740084 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.516740084 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:21.516740084 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.023150921 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:22.023257971 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:22.023335934 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:22.023864985 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:22.023901939 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:22.180480957 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.229898930 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.235866070 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235878944 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235923052 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235945940 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.235949039 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235968113 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235975981 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.235991001 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.236021996 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.308619022 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.308702946 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.308770895 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.309820890 CET	49720	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.309866905 CET	443	49720	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.427833080 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.427870035 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.427910089 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.427937984 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.427947998 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.453527927 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.453604937 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.453638077 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.453675985 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.453701973 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.453752995 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.454078913 CET	49724	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.454101086 CET	443	49724	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.843641043 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.845081091 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.874149084 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.874222040 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.874320984 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.875221014 CET	49722	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.875238895 CET	443	49722	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.879200935 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.879245996 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.879368067 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.879600048 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.879614115 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894359112 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894372940 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894397020 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894412994 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894414902 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.894419909 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894429922 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894448042 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:22.894459963 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.894485950 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.898401976 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:22.997685909 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.039356947 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.048315048 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.083205938 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.083216906 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.083260059 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.083276987 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.083328962 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.092736006 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.105927944 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.105937004 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.105954885 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.105962038 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.105978012 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.105988979 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.105997086 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.106044054 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.106050014 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.106198072 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.106436968 CET	49726	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.106451988 CET	443	49726	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.232530117 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:23.232614994 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:23.232727051 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:23.282675028 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.282685995 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.282716036 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.282743931 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.282757998 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.282820940 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.545753956 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545773983 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545825958 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.545840025 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545854092 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545878887 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.545886993 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545898914 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.545907974 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.545938015 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.547502041 CET	49725	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:23.547514915 CET	443	49725	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:23.580389023 CET	49713	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:27:23.580435991 CET	443	49713	142.250.181.68	192.168.2.5
Nov 20, 2024 17:27:23.581011057 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:23.581106901 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:23.581209898 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:23.581532001 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:23.581567049 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:23.613593102 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613663912 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613684893 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613702059 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613743067 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613768101 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613822937 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.613822937 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.613822937 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.613853931 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.613903046 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.640932083 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.641021013 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.641041994 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.641057968 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:23.641103029 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:23.843245029 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:23.843324900 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:23.865771055 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:23.865817070 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:23.866183043 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:23.908118010 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.066930056 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.107353926 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.452971935 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453011036 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453017950 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453030109 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453062057 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453069925 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.453103065 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.453123093 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.453146935 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.644402981 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.644434929 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.644483089 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.644520044 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.644542933 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.644577980 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.705260038 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.705291986 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.705352068 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.705421925 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.705456972 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.705481052 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.821708918 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:24.822002888 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:24.822035074 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:24.822376966 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:24.822698116 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:24.822761059 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:24.823021889 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:24.828221083 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.828250885 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.828299046 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.828330994 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.828350067 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.828376055 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.863332033 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:24.879729986 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.879769087 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.879813910 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.879847050 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.879864931 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.879879951 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.898720980 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:24.898780107 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.898808002 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.898843050 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.898853064 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.898890972 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.898910046 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.899240971 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:24.899270058 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:24.900024891 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:24.900382042 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:24.900501013 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:24.900533915 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:24.932775974 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.932806969 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.932851076 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.932882071 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:24.932903051 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.932918072 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:24.943325996 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:24.944633961 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:25.017937899 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.017971992 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.018045902 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.018081903 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.018115044 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.018140078 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.039437056 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.039469957 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.039515972 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.039542913 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.039566040 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.039580107 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.059866905 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.059914112 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.059957027 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.059992075 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.060014963 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.060030937 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.074163914 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.074196100 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.074244976 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.074278116 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.074299097 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.074353933 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.085267067 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.085297108 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.085339069 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.085366011 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.085390091 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.085417032 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.095668077 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.095695972 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.095745087 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.095777988 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.095797062 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.095815897 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.100744963 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.100824118 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.100831032 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.100878000 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.100979090 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.101003885 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.101018906 CET	49728	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.101026058 CET	443	49728	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.149183989 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.149255991 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.149353027 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.150741100 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.150793076 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.150860071 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.151333094 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.151365042 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.152741909 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.152790070 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.152851105 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.153111935 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.153126001 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.154105902 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.154140949 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.155261040 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.155297995 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.155560017 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.156027079 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.156039000 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.156745911 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.156768084 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.156872034 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.157068014 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:25.157077074 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:25.497646093 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:25.497673035 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:25.497685909 CET	49721	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:27:25.497692108 CET	443	49721	172.202.163.200	192.168.2.5
Nov 20, 2024 17:27:25.574651003 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:25.574743032 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:25.574881077 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:25.577677965 CET	49733	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:25.577696085 CET	443	49733	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:26.396619081 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:26.396692038 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:26.396764040 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:26.424025059 CET	49731	443	192.168.2.5	18.165.217.42
Nov 20, 2024 17:27:26.424077034 CET	443	49731	18.165.217.42	192.168.2.5
Nov 20, 2024 17:27:26.873512983 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:26.874152899 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:26.874214888 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:26.876954079 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:26.876967907 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:26.877667904 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:26.878115892 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:26.878151894 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:26.878762007 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:26.878770113 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.010833979 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.011326075 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.011359930 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.012021065 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.012027025 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.031574965 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.032326937 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.032351017 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.032999039 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.033005953 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.372873068 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.372901917 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.372981071 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373008013 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373138905 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373357058 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373363018 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373450041 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373516083 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373545885 CET	443	49737	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373585939 CET	49737	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373775005 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373806953 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.373862982 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.373889923 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.374027967 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.375226021 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.375236034 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.375392914 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.375441074 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.375483990 CET	443	49735	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.375541925 CET	49735	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.381069899 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.381118059 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.381185055 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.381361961 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.381376982 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.383430004 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.383470058 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.383631945 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.383965015 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.383980036 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.457072020 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.457148075 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.457204103 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.479522943 CET	49739	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.479562998 CET	443	49739	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.482564926 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.482629061 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.482705116 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.483105898 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.483136892 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.514828920 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.515017033 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.515088081 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.518315077 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.518336058 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.518347979 CET	49736	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.518353939 CET	443	49736	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.522648096 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.522674084 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.522752047 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.522917986 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.522927046 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.639842987 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.640255928 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.640271902 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:27.640721083 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:27.640724897 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.229849100 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.232140064 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.232140064 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.232163906 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.232180119 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.242402077 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.243204117 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.243205070 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.243247986 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.243268013 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.335880995 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.337553978 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.337553978 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.337599993 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.337620020 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.459646940 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.460576057 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.460612059 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.461183071 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.461195946 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.673232079 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.673307896 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.673507929 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.673944950 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.673974991 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.674005985 CET	49742	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.674021006 CET	443	49742	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.677084923 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.677128077 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.677264929 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.677452087 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.677468061 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.685631990 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.685712099 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.685775042 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.685861111 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.685861111 CET	49741	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.685903072 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.685914993 CET	443	49741	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.688047886 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.688097000 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.688216925 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.688344955 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.688355923 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.704379082 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.704400063 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.704448938 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.704504013 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.704504013 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.704672098 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.704672098 CET	49738	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.704689026 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.704700947 CET	443	49738	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.706809998 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.706839085 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.707075119 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.707075119 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.707097054 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.791790009 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.791860104 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.791939974 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.792146921 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.792172909 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.792186975 CET	49743	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.792193890 CET	443	49743	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.795042038 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.795072079 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.795160055 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.795356989 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.795372009 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.915291071 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.915519953 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.915613890 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.915986061 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.916016102 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.916030884 CET	49744	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.916038990 CET	443	49744	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.919576883 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.919612885 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:29.919692039 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.919904947 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:29.919920921 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:30.887402058 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:30.887451887 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:30.887540102 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:30.888875961 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:30.888885975 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:31.458626986 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.459273100 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.459306002 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.459964037 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.459971905 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.461782932 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.462162971 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.462176085 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.462680101 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.462685108 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.500581026 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.501574993 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.501616001 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.502033949 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.502043009 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.521419048 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.522095919 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.522128105 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.522556067 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.522561073 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.706476927 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.707590103 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.707623005 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.708055019 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.708061934 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.900048018 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.900224924 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.900343895 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.900567055 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.900593042 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.900607109 CET	49747	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.900614977 CET	443	49747	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.904122114 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.904167891 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.904266119 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.904483080 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.904498100 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.906685114 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.906758070 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.906822920 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.906898975 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.906898975 CET	49745	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.906915903 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.906929016 CET	443	49745	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.909137964 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.909197092 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.909282923 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.909467936 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.909485102 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.953460932 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.953561068 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.953629971 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.953824043 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.953845978 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.953857899 CET	49746	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.953864098 CET	443	49746	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.957084894 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.957187891 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.957285881 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.957490921 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.957535028 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.978441000 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.978533983 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.978605986 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.978692055 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.978713036 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.978724957 CET	49748	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.978737116 CET	443	49748	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.981239080 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.981271982 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:31.981359959 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.981553078 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:31.981570959 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.171890974 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:32.172223091 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:32.172249079 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:32.172580957 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:32.172991991 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:32.173057079 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:32.223318100 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:32.281361103 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.281439066 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.281508923 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.281686068 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.281703949 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.281716108 CET	49749	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.281722069 CET	443	49749	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.284724951 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.284778118 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:32.284864902 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.285032034 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:32.285059929 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.680018902 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.681097984 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.681139946 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.681830883 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.681839943 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.798469067 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.799376965 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.799438953 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.799937010 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.799942970 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.814693928 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.815268040 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.815291882 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.815882921 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.815888882 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.877146006 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.877717972 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.877804041 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:33.878304958 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:33.878319979 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.109031916 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.109723091 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.109796047 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.110320091 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.110333920 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.114628077 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.114712000 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.114778042 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.114985943 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.115010023 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.115032911 CET	49751	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.115041018 CET	443	49751	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.118293047 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.118391991 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.118508101 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.118689060 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.118720055 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.280906916 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.280946016 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.280997038 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.281019926 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.281060934 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281095028 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281254053 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281276941 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.281287909 CET	49754	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281287909 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281295061 CET	443	49754	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.281303883 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.281316996 CET	49752	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.281321049 CET	443	49752	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.283895969 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.283947945 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.284029007 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.284118891 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.284173965 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.284193993 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.284208059 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.284234047 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.284406900 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.284421921 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.333353043 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.333523035 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.333594084 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.333666086 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.333690882 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.333703995 CET	49753	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.333710909 CET	443	49753	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.337053061 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.337097883 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.337183952 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.337306023 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.337318897 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.560692072 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.560877085 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.560959101 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.561052084 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.561095953 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.561124086 CET	49755	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.561139107 CET	443	49755	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.564404964 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.564448118 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:34.564553022 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.564718008 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:34.564728975 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:35.945305109 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:35.959856033 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:35.959916115 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:35.970526934 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:35.970541000 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.162287951 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.163255930 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.165216923 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.165292978 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.166033030 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.166048050 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.166454077 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.166496992 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.167381048 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.167388916 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.322685003 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.323287964 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.323340893 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.323911905 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.323918104 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.332889080 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.333410978 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.333457947 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.333976030 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.333986998 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.401990891 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.402070999 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.402240992 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.402590990 CET	49756	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.402632952 CET	443	49756	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.406351089 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.406382084 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.406477928 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.406718969 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.406734943 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.611975908 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.612158060 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.612247944 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.612406969 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.612462997 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.612490892 CET	49758	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.612521887 CET	443	49758	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.613801003 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.613998890 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.614059925 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.614299059 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.614343882 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.614375114 CET	49759	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.614391088 CET	443	49759	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.616692066 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.616741896 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.616808891 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.617044926 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.617058039 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.618254900 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.618283033 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.618346930 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.618504047 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.618516922 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.759620905 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.759767056 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.759835005 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.760010004 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.760030985 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.760042906 CET	49760	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.760047913 CET	443	49760	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.766376019 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.766453981 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.766556978 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.766808987 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.766841888 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.786386013 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.786484957 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.786559105 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.786736965 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.786778927 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.786809921 CET	49757	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.786825895 CET	443	49757	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.790103912 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.790138960 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:36.790216923 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.790462017 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:36.790474892 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.122209072 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.122924089 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.122948885 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.123337984 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.123342991 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.458765984 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.460267067 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.460304976 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.460814953 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.460819960 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.536232948 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.536880970 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.536906004 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.537735939 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.537741899 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.558540106 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.559007883 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.559037924 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.559497118 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.559503078 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.577368975 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.577428102 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.577743053 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.577743053 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.579040051 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.579452991 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.579483986 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.579790115 CET	49761	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.579803944 CET	443	49761	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.580045938 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.580051899 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.581247091 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.581275940 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:38.581374884 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.581526995 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:38.581537008 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.560653925 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.560862064 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.560981989 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.561024904 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.561049938 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.561101913 CET	49762	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.561109066 CET	443	49762	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.564148903 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.564201117 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.564299107 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.564457893 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.564471006 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.805603981 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.805670977 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.805721045 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.805915117 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.805934906 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.805946112 CET	49765	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.805951118 CET	443	49765	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.809077978 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.809134960 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.809210062 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.809441090 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.809454918 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.811911106 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.812069893 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.812122107 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.812151909 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.812167883 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.812177896 CET	49763	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.812185049 CET	443	49763	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.814395905 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.814491034 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.814569950 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.814728975 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.814764977 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.824326038 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.824398994 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.824470997 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.824568033 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.824568033 CET	49764	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.824610949 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.824635983 CET	443	49764	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.827080965 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.827120066 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:39.827184916 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.827358007 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:39.827370882 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.073139906 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.073836088 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.073868036 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.074213028 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.074235916 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.377814054 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.378442049 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.378480911 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.379077911 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.379085064 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.537739038 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.537817955 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.537904024 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.538227081 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.538228035 CET	49766	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.538249969 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.538259983 CET	443	49766	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.541687012 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.541783094 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.545855045 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.546049118 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.546080112 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.627060890 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.627722979 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.627768040 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.627815962 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.628196001 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.628218889 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.628393888 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.628407001 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.628550053 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.628556013 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.637267113 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.637754917 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.637793064 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.638276100 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.638286114 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.827121973 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.827186108 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.827379942 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.827486992 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.827506065 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.827517986 CET	49767	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.827522993 CET	443	49767	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.830384016 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.830427885 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:41.830517054 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.830663919 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:41.830677986 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.071223021 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.071295977 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.071407080 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.071630955 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.071655989 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.071666956 CET	49770	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.071674109 CET	443	49770	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.074862003 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.074902058 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.074987888 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.075181961 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.075191975 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.075242996 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.075298071 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.075342894 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.075448990 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.075454950 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.075462103 CET	49768	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.075465918 CET	443	49768	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.077415943 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.077470064 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.077539921 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.077670097 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.077682972 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.087857962 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.088012934 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.088084936 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.088129044 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.088129997 CET	49769	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.088150024 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.088166952 CET	443	49769	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.091151953 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.091228962 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:42.091332912 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.091451883 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:42.091469049 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.339710951 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.340449095 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.340517998 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.340818882 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.340832949 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.648282051 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.648838997 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.648881912 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.649406910 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.649414062 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.786355019 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.786434889 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.786602974 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.786705971 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.786731958 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.786747932 CET	49771	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.786756039 CET	443	49771	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.789818048 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.789840937 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.789927959 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.790113926 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.790127993 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.827020884 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.827944994 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.827970028 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.828293085 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.828298092 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.893714905 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.894277096 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.894305944 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.894532919 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.894757032 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.894764900 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.895010948 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.895045996 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:43.895442009 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:43.895447969 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.111155033 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.111243010 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.111409903 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.111833096 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.111860991 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.111876011 CET	49772	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.111884117 CET	443	49772	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.115137100 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.115192890 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.115267992 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.115427017 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.115443945 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.286890984 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.286984921 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.287266016 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.287421942 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.287455082 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.287483931 CET	49775	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.287498951 CET	443	49775	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.290780067 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.290843010 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.290944099 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.291081905 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.291098118 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.338501930 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.338581085 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.338649035 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.338845015 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.338876009 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.338892937 CET	49773	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.338901043 CET	443	49773	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.341330051 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.341388941 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.341440916 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.342053890 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.342097998 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.342158079 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.342272997 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.342303991 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.342324018 CET	49774	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.342334032 CET	443	49774	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.343218088 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.343229055 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.344557047 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.344619989 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:44.344697952 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.344844103 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:44.344861984 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.713628054 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.714538097 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:45.714574099 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.715104103 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:45.715110064 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.911215067 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.912173986 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:45.912199020 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:45.912534952 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:45.912539959 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.083647013 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.084151030 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.084204912 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.084589005 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.084599018 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.155688047 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.156375885 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.156462908 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.156824112 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.156845093 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.205277920 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.205724955 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.205760002 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.206161022 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.206166983 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.283181906 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.283252001 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.283411026 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.283827066 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.283849955 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.283874035 CET	49776	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.283880949 CET	443	49776	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.286247015 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.286292076 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.286377907 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.286525965 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.286539078 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.367182016 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.367387056 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.367449999 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.367530107 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.367548943 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.367558002 CET	49777	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.367563963 CET	443	49777	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.370327950 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.370378017 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.370450020 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.370578051 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.370589972 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.517524958 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.517622948 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.517723083 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.517898083 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.517963886 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.518001080 CET	49780	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.518017054 CET	443	49780	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.520462036 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.520512104 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.520589113 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.520714045 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.520730019 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.621964931 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.622067928 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.622149944 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.622286081 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.622314930 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.622332096 CET	49778	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.622339010 CET	443	49778	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.624584913 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.624622107 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.624710083 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.624902010 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.624914885 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.661603928 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.661668062 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.661787033 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.662270069 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.662288904 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.662316084 CET	49779	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.662321091 CET	443	49779	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.664809942 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.664850950 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.664918900 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.665205956 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:46.665218115 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:46.960623026 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:46.960736036 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:46.960783005 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:48.122203112 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.127609968 CET	49750	443	192.168.2.5	104.19.168.24
Nov 20, 2024 17:27:48.127645016 CET	443	49750	104.19.168.24	192.168.2.5
Nov 20, 2024 17:27:48.128864050 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.128909111 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.129803896 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.129821062 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.172940016 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.173418045 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.173455954 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.173877954 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.173891068 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.285916090 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.286494970 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.286547899 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.287080050 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.287089109 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.607808113 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.608726025 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.608747959 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.609333038 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.609339952 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.632823944 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.633024931 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.633172035 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.633224964 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.633244038 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.633255959 CET	49783	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.633261919 CET	443	49783	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.636558056 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.636599064 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.636698008 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.636817932 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.636823893 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.646537066 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.646621943 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.646780968 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.646800041 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.646811962 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.646821022 CET	49781	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.646826029 CET	443	49781	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.648838043 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.649207115 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.649235010 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.649617910 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.649617910 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.649636984 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.649656057 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.649734974 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.649854898 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.649866104 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.923208952 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.923290014 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.923489094 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.923572063 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.923593044 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.923609972 CET	49782	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.923616886 CET	443	49782	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.926248074 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.926279068 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:48.926409960 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.926573992 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:48.926584005 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.052716017 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.052836895 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.052906990 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.053009033 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.053025961 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.053040981 CET	49784	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.053045988 CET	443	49784	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.055573940 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.055632114 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.055721045 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.055896044 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.055917025 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.101874113 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.101938963 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.101991892 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.102130890 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.102152109 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.102164030 CET	49785	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.102169991 CET	443	49785	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.104950905 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.104984045 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:49.105042934 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.105197906 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:49.105209112 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.430179119 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.430891991 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.430921078 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.431334019 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.431339025 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.508544922 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.509175062 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.509207964 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.509681940 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.509694099 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.774890900 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.775463104 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.775496006 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.776015997 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.776021004 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.840553045 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.841140985 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.841175079 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.841609955 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.841624975 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.874317884 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.874388933 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.874450922 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.874640942 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.874656916 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.874670982 CET	49786	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.874677896 CET	443	49786	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.877387047 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.877440929 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.877511024 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.877644062 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.877656937 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.924151897 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.924772978 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.924812078 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.925206900 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.925214052 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.966814041 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.966882944 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.966963053 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.967150927 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.967170954 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.967181921 CET	49787	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.967187881 CET	443	49787	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.970165014 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.970215082 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:50.970320940 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.970499992 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:50.970513105 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.230426073 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.230496883 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.230552912 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.230721951 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.230743885 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.230757952 CET	49788	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.230762959 CET	443	49788	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.234035015 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.234076977 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.234138012 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.234293938 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.234306097 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.312884092 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.312979937 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.313039064 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.313174963 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.313194990 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.313206911 CET	49790	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.313213110 CET	443	49790	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.316442013 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.316479921 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.316567898 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.316754103 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.316762924 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.378770113 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.378942966 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.379040003 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.379146099 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.379172087 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.379187107 CET	49789	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.379194975 CET	443	49789	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.382196903 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.382236958 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:51.382323027 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.382505894 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:51.382525921 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.723871946 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.724555969 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:52.724631071 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.724960089 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:52.724977970 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.766577005 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.767070055 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:52.767096996 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:52.767514944 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:52.767520905 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.040683985 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.041367054 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.041409969 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.042134047 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.042140007 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.092597008 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.093162060 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.093184948 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.093575001 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.093580008 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.180006981 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.180182934 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.180346966 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.180438995 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.180438995 CET	49791	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.180488110 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.180514097 CET	443	49791	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.183151007 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.183193922 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.183268070 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.183396101 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.183403015 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.210238934 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.210467100 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.210644007 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.211383104 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.211399078 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.211580038 CET	49792	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.211585045 CET	443	49792	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.218660116 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.218729973 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.218831062 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.218949080 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.218974113 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.287276983 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.287722111 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.287756920 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.288129091 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.288140059 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.480156898 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.480221033 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.480326891 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.480572939 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.480572939 CET	49794	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.480592012 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.480602026 CET	443	49794	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.483644009 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.483685017 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.483773947 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.483946085 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.483959913 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.550004959 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.550077915 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.550209999 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.550470114 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.550496101 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.550507069 CET	49793	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.550513029 CET	443	49793	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.553468943 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.553577900 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.553754091 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.553916931 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.553937912 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.748456955 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.748544931 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.748621941 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.748801947 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.748821974 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.748831034 CET	49795	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.748836040 CET	443	49795	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.751352072 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.751455069 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:53.751518965 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.751671076 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:53.751708984 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.019174099 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.019855976 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.019910097 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.020318031 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.020327091 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.287043095 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.287552118 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.287667036 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.287720919 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.287766933 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.287892103 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.287930965 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.288187027 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.288197041 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.288333893 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.288343906 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.288485050 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.288501978 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.288897038 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.288901091 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.462387085 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.462482929 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.462594032 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.462866068 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.462897062 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.462913990 CET	49797	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.462922096 CET	443	49797	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.466471910 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.466512918 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.466619968 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.466844082 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.466860056 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.602440119 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.603173018 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.603204012 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.603787899 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.603792906 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.729089975 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.729166031 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.729226112 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.729693890 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.729723930 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.729739904 CET	49799	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.729748011 CET	443	49799	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.732291937 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.732331038 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.732403040 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.732712984 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.732732058 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.736260891 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.736323118 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.736376047 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.736452103 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.736469984 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.736488104 CET	49798	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.736493111 CET	443	49798	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.738399029 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.738435030 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.738524914 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.738639116 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.738651037 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.755418062 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.755573988 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.755635977 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.755693913 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.755712032 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.755723953 CET	49796	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.755728960 CET	443	49796	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.757806063 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.757848024 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:55.757917881 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.758033991 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:55.758045912 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.061661005 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.061764956 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.061830044 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.065278053 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.065303087 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.065315008 CET	49800	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.065320015 CET	443	49800	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.110994101 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.111042976 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:56.111115932 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.114939928 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:56.114957094 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.348253012 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.348951101 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.348998070 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.349376917 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.349385023 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.526573896 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.527234077 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.527264118 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.527667999 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.527672052 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.584070921 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.584650040 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.584682941 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.585211992 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.585220098 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.632244110 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.632951975 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.633023977 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.633397102 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.633416891 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.804945946 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.805130959 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.805253983 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.805562019 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.805583954 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.805598021 CET	49801	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.805603981 CET	443	49801	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.808692932 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.808729887 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.808809042 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.808948040 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.808955908 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.855859995 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.856452942 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.856487036 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:57.856919050 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:57.856925011 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.087002039 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.087068081 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.087166071 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.087378025 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.087399960 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.087414026 CET	49803	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.087419033 CET	443	49803	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.090389967 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.090483904 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.090570927 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.090706110 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.090742111 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.096352100 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.096520901 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.096600056 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.096632004 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.096632004 CET	49802	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.096647024 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.096657038 CET	443	49802	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.098742008 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.098776102 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.099029064 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.099029064 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.099062920 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.221906900 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.221977949 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.222064018 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.222261906 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.222305059 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.222333908 CET	49804	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.222349882 CET	443	49804	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.225375891 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.225425005 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.225509882 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.225680113 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.225692987 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.295679092 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.295749903 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.295870066 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.298502922 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.298502922 CET	49805	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.298559904 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.298588991 CET	443	49805	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.302511930 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.302575111 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:58.302680016 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.306488991 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:58.306516886 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.647516012 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.648112059 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.648145914 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.648591995 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.648597956 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.894090891 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.894593000 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.894625902 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.895030022 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.895035028 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.942146063 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.942643881 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.942676067 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:27:59.943082094 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:27:59.943085909 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.025489092 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.026165962 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.026259899 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.026707888 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.026731968 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.120352983 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.120868921 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.120918036 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.121484041 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.121493101 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.160720110 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.160902023 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.160978079 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.161057949 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.161057949 CET	49806	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.161098003 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.161127090 CET	443	49806	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.163666964 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.163764000 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.163851976 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.163980961 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.164021015 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.402410984 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.402499914 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.402579069 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.405981064 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.406018019 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.406033993 CET	49807	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.406043053 CET	443	49807	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.409462929 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.409502029 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.409573078 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.409981966 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.410001040 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.525428057 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.525664091 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.525813103 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.525899887 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.525901079 CET	49809	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.525947094 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.525970936 CET	443	49809	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.528614998 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.528712034 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.528822899 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.528965950 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.529019117 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.571753025 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.571824074 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.571892977 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.572087049 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.572109938 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.572120905 CET	49810	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.572125912 CET	443	49810	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.574990988 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.575042963 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:00.575126886 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.575309992 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:00.575330973 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:01.995117903 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:01.995171070 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:01.995269060 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:01.995563030 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:01.995577097 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:02.019484043 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.019901991 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.019937038 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.020339012 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.020344019 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.125014067 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.125519991 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.125549078 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.125957966 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.125962973 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.174227953 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.174331903 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.174407005 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.174616098 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.174639940 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.174652100 CET	49808	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.174659014 CET	443	49808	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.177736998 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.177776098 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.177889109 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.178081036 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.178098917 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.203911066 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.204600096 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.204633951 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.205040932 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.205053091 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.367199898 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.367796898 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.367831945 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.368225098 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.368231058 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.500067949 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.500169992 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.500279903 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.500484943 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.500508070 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.500519991 CET	49811	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.500524998 CET	443	49811	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.503083944 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.503123045 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.503218889 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.503345966 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.503355026 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.585903883 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.586085081 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.586194992 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.586317062 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.586335897 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.586345911 CET	49813	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.586350918 CET	443	49813	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.589318991 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.589375019 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.589466095 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.589672089 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.589689016 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.656043053 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.656073093 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.656142950 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.656209946 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.656239033 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.656532049 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.656552076 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.656562090 CET	49812	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.656569958 CET	443	49812	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.659673929 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.659722090 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.659831047 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.660013914 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.660029888 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.812241077 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.812304020 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.812351942 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.812520027 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.812537909 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.812546015 CET	49814	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.812551022 CET	443	49814	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.815877914 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.815974951 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:02.816090107 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.816251993 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:02.816288948 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:03.755064964 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:03.755194902 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:03.758732080 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:03.758739948 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:03.758948088 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:03.767364025 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:03.815330982 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:03.970145941 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:03.970693111 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:03.970726967 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:03.971107006 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:03.971112967 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.296895027 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.297416925 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.297442913 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.297877073 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.297880888 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.379144907 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.379749060 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.379776955 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.380177975 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.380182028 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.462742090 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.462768078 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.462789059 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.462908030 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.462925911 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.462991953 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.513274908 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.513338089 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.513451099 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.513484001 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.515300035 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.515388012 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.525703907 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.525723934 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.525732994 CET	49816	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.525738955 CET	443	49816	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.529403925 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.529441118 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.529505968 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.530023098 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.530040026 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.537358046 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.540663004 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.540697098 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.541059971 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.541066885 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.564435959 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.566479921 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.566528082 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.566572905 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.566581964 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.566631079 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.567053080 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.567131996 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.567517042 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.567533970 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.567647934 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.567662954 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.567703009 CET	49815	443	192.168.2.5	172.202.163.200
Nov 20, 2024 17:28:04.567708015 CET	443	49815	172.202.163.200	192.168.2.5
Nov 20, 2024 17:28:04.917840958 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.917906046 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.918014050 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.918051004 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.918293953 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.918309927 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.918317080 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.918662071 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.918762922 CET	443	49818	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.918804884 CET	49818	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921133041 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921186924 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921209097 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921225071 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921344042 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921355963 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921387911 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921438932 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921482086 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921514034 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921524048 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921524048 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.921531916 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921700001 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921730042 CET	443	49817	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.921778917 CET	49817	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.923605919 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.923638105 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:04.923711061 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.923847914 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:04.923860073 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.021306992 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.024389029 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.024507046 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.024549961 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.024566889 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.024595976 CET	49819	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.024600983 CET	443	49819	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.027426004 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.027504921 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.027620077 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.027777910 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.027813911 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.027838945 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.030709982 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.030781031 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.031411886 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.031455040 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.031485081 CET	49820	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.031501055 CET	443	49820	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.034061909 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.034152031 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:05.034254074 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.034411907 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:05.034444094 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.303792000 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.304440022 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.304496050 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.305046082 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.305058956 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.739876986 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.742914915 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.743092060 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.743092060 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.743092060 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.745820045 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.745918036 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.746026993 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.746223927 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.746268034 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.766985893 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.767517090 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.767580032 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.767962933 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.767976999 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.837415934 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.837920904 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.837965012 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.838459969 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.838471889 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.851047993 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.851419926 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.851448059 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.851821899 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.851828098 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.901575089 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.902092934 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.902184010 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:06.902611971 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:06.902626038 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.054666042 CET	49821	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.054702997 CET	443	49821	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.216568947 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.219441891 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.219535112 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.239752054 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.239820957 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.239845991 CET	49822	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.239856958 CET	443	49822	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.249963999 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.250004053 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.250065088 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.250194073 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.250210047 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.307334900 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.310851097 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.311067104 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.355914116 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.359402895 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.359584093 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.374008894 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.374008894 CET	49823	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.374042988 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.374056101 CET	443	49823	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.375087023 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.375125885 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.375144958 CET	49825	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.375154018 CET	443	49825	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.395114899 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.395155907 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.395236969 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.398631096 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.398643017 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.408304930 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.408356905 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.408555984 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.408584118 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.408591986 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.582969904 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.588367939 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.588551998 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.588551998 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.588551998 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.591489077 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.591532946 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.591622114 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.591790915 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.591801882 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:07.897775888 CET	49824	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:07.897833109 CET	443	49824	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:08.634344101 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:08.635092974 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:08.635158062 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:08.635525942 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:08.635533094 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.028259993 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.028862000 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.028899908 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.029329062 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.029337883 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.092456102 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.094924927 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.095118046 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.095118046 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.095118999 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.097765923 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.097814083 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.097893000 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.098038912 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.098053932 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.161201000 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.161835909 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.161870003 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.162187099 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.162190914 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.244232893 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.244752884 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.244801998 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.245268106 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.245280981 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.386593103 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.387222052 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.387280941 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.387809038 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.387823105 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.402251005 CET	49826	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.402309895 CET	443	49826	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.527487040 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.533411980 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.533485889 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.533647060 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.533647060 CET	49828	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.533660889 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.533669949 CET	443	49828	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.536051989 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.536115885 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.536190987 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.536343098 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.536356926 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.597476006 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.597516060 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.597569942 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.597697973 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.597697973 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.597836971 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.597851992 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.597862005 CET	49830	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.597867966 CET	443	49830	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.600269079 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.600308895 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.600384951 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.600503922 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.600519896 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.695571899 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.698594093 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.698709011 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.723510981 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.723551989 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.723571062 CET	49829	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.723577023 CET	443	49829	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.726202011 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.726255894 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.726321936 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.726461887 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.726474047 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.832616091 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.836585999 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.836751938 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.839729071 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.839755058 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.839771032 CET	49831	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.839776993 CET	443	49831	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.878827095 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.878926039 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:09.879024982 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.879156113 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:09.879180908 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:10.861489058 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:10.862101078 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:10.862147093 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:10.862576962 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:10.862588882 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.298226118 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.301050901 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.301100016 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.301124096 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.301139116 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.301203966 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.301352024 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.301368952 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.301382065 CET	49832	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.301388025 CET	443	49832	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.305604935 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.305644035 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.305705070 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.305978060 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.305986881 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.320142984 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.325042009 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.325062990 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.325520992 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.325525045 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.480204105 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.480726004 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.480753899 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.481208086 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.481211901 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.533502102 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.533966064 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.533983946 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.534447908 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.534452915 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.630650997 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.631170988 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.631227016 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.631716013 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.631730080 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.678411007 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:11.678463936 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:11.678539991 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:11.678796053 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:11.678807974 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:11.778048992 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.778111935 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.778333902 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.778362036 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.778383017 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.778392076 CET	49833	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.778397083 CET	443	49833	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.781164885 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.781209946 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.781281948 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.781416893 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.781428099 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.948345900 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.950854063 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.950937033 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.951000929 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.951000929 CET	49834	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.951019049 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.951026917 CET	443	49834	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.953787088 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.953830957 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.953915119 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.954077959 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.954092026 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.985367060 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.988779068 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.989897966 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.989937067 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.989955902 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.989969015 CET	49835	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.989974022 CET	443	49835	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.992806911 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.992852926 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:11.992924929 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.993074894 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:11.993088007 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.071228981 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.077852011 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.077970982 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.077986956 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.078054905 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.078128099 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.078170061 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.078202009 CET	49836	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.078217030 CET	443	49836	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.081003904 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.081049919 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:12.081154108 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.081315041 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:12.081327915 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.030550957 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.034287930 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.034322977 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.034778118 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.034786940 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.482995987 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.486229897 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.486432076 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.486433029 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.486433029 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.489187002 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.489233971 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.489312887 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.489454985 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.489469051 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.671466112 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.672043085 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.672070980 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.672593117 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.672596931 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.675698996 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:13.675978899 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:13.676008940 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:13.677212000 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:13.677521944 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:13.677700043 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:13.730699062 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:13.740879059 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.741373062 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.741394997 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.741903067 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.741911888 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.781275988 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.781827927 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.781864882 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.782135010 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.782140970 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.791471004 CET	49837	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.791502953 CET	443	49837	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.932704926 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.933218002 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.933243036 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:13.933829069 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:13.933834076 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.129067898 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.132049084 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.132143021 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.132200956 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.132221937 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.132236004 CET	49839	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.132241011 CET	443	49839	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.135385990 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.135407925 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.135479927 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.135674000 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.135679960 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.189765930 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.193056107 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.193116903 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.193156958 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.193176031 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.193187952 CET	49840	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.193193913 CET	443	49840	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.196116924 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.196214914 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.196296930 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.196422100 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.196459055 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216547012 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216598034 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216639996 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.216670036 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216689110 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216738939 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.216820002 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.216835022 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.216847897 CET	49841	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.216852903 CET	443	49841	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.219861984 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.219901085 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.219969988 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.220174074 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.220185995 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.388355017 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.390811920 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.390894890 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.401608944 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.401608944 CET	49842	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.401633978 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.401644945 CET	443	49842	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.412272930 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.412375927 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:14.412458897 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.412615061 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:14.412651062 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.292735100 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.293353081 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.293399096 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.293761015 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.293766022 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.737015963 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.742511988 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.742563009 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.742688894 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.742789030 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.742808104 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.742818117 CET	49843	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.742822886 CET	443	49843	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.745593071 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.745690107 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.745804071 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.745989084 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.746020079 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.920053959 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.920561075 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.920589924 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.920993090 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.920996904 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.980422020 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.981060028 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.981156111 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:15.981385946 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:15.981403112 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.027501106 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.028013945 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.028045893 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.028459072 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.028464079 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.219280005 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.219919920 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.219995975 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.220320940 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.220333099 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.373361111 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.376590967 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.376662970 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.376703978 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.376718998 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.376727104 CET	49844	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.376732111 CET	443	49844	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.379636049 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.379719973 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.379828930 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.379997969 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.380034924 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.429492950 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.430668116 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.430759907 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.430864096 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.430864096 CET	49845	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.430902958 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.430947065 CET	443	49845	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.433857918 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.433907032 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.434004068 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.434159040 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.434178114 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.524049044 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.527118921 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.527225971 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.527270079 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.527287006 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.527318001 CET	49846	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.527323008 CET	443	49846	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.529581070 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.529623032 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.529706001 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.529854059 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.529865026 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.665929079 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.668843985 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.668901920 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.668929100 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.668987989 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.669068098 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.669106960 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.669132948 CET	49847	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.669148922 CET	443	49847	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.671608925 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.671639919 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:16.671720982 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.671875954 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:16.671886921 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.487955093 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.488493919 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.488550901 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.488998890 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.489008904 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.928278923 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.934768915 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.934875011 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.934961081 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.934961081 CET	49848	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.935005903 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.935034037 CET	443	49848	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.938179016 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.938206911 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:17.938277006 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.938412905 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:17.938426971 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.231028080 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.231473923 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.231563091 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.232012033 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.232026100 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.245954037 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.246409893 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.246489048 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.246824026 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.246838093 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.258896112 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.259202957 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.259222031 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.259588957 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.259594917 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.468553066 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.470563889 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.470627069 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.475334883 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.475349903 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.678977966 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.681737900 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.681837082 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.681884050 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.681884050 CET	49850	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.681906939 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.681921005 CET	443	49850	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.684887886 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.684973001 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.685134888 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.685322046 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.685338020 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.696300983 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.696341991 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.696405888 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.696408987 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.696475983 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.696603060 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.696604013 CET	49851	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.696646929 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.696674109 CET	443	49851	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.698937893 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.698973894 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.699048042 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.699181080 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.699193001 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.702827930 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.706609011 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.706691980 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.706741095 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.706764936 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.706795931 CET	49849	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.706810951 CET	443	49849	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.709014893 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.709034920 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.709105968 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.709245920 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.709258080 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.914166927 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.917514086 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.917742014 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.917742968 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.917742968 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.920233965 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.920259953 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:18.920325994 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.920473099 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:18.920480013 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:19.229274035 CET	49852	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:19.229296923 CET	443	49852	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:19.730695963 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:19.731442928 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:19.731470108 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:19.732100964 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:19.732105017 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.187016964 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.190099001 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.190192938 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.190259933 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.190280914 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.190294027 CET	49853	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.190299988 CET	443	49853	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.194118977 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.194137096 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.194226027 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.194453001 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.194463968 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.329880953 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.330651999 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.330694914 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.331020117 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.331026077 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.493196964 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.493937969 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.493963957 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.494518995 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.494523048 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.526247025 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.526835918 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.526875973 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.527149916 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.527156115 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.775609970 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.781147957 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.781240940 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.781263113 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.781332016 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.781411886 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.781457901 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.781487942 CET	49855	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.781502962 CET	443	49855	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.783958912 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.784039021 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.784126043 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.784252882 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.784267902 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.944839001 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.947992086 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.948190928 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.977751970 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.980860949 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.980953932 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.981296062 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.981333971 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.981362104 CET	49854	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.981378078 CET	443	49854	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.995233059 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.997060061 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.997061014 CET	49856	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:20.997109890 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:20.997138023 CET	443	49856	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.002610922 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.002639055 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.003813982 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.003825903 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.171545029 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.171650887 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.171740055 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.172804117 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.172844887 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.174741030 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.174837112 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.174909115 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.175246000 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.175282001 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.444392920 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.447241068 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.447335005 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.447429895 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.447429895 CET	49857	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.447470903 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.447494984 CET	443	49857	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.450463057 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.450561047 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.450697899 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.450897932 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.450943947 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.993030071 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.993968010 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.994060040 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:21.994589090 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:21.994606018 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.450648069 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.452764988 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.452965021 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.452965975 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.452965975 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.455845118 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.455939054 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.456041098 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.456196070 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.456233025 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.521708965 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.522350073 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.522388935 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.522942066 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.522948027 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.767384052 CET	49858	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.767457008 CET	443	49858	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.907232046 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.908055067 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.908138990 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.908601046 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.908616066 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.959567070 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.962656975 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.962708950 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.962764978 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.962764978 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.962865114 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.962866068 CET	49859	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.962909937 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.962938070 CET	443	49859	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.963757038 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.964296103 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.964349031 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.964870930 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.964884043 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.966351986 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.966413021 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:22.966490030 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.966650009 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:22.966660976 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.138073921 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:23.138144970 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:23.138211966 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:23.205440044 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.206017017 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.206078053 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.206454039 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.206466913 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.342068911 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.344422102 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.344491959 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.344506979 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.344574928 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.344620943 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.344620943 CET	49861	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.344664097 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.344695091 CET	443	49861	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.347835064 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.347881079 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.347940922 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.348069906 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.348083019 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.641200066 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.644301891 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.644445896 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.644655943 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.644704103 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.644733906 CET	49862	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.644751072 CET	443	49862	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.647649050 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.647744894 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.647907972 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.648010969 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.648042917 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.716494083 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.716669083 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.716789007 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.716860056 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.716860056 CET	49860	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.716887951 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.716911077 CET	443	49860	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.719274044 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.719326019 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:23.719398975 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.719512939 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:23.719527960 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.127798080 CET	49838	443	192.168.2.5	142.250.181.68
Nov 20, 2024 17:28:24.127835989 CET	443	49838	142.250.181.68	192.168.2.5
Nov 20, 2024 17:28:24.255377054 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.256001949 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.256072044 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.256618023 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.256632090 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.703104019 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.706763029 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.706809998 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.706851006 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.706904888 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.706981897 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.707026005 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.707051992 CET	49863	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.707073927 CET	443	49863	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.710254908 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.710304976 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.710381985 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.710525990 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.710541964 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.752047062 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.752563953 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.752595901 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:24.753016949 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:24.753021955 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.196451902 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.197396994 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.197434902 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.197834969 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.197853088 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.197860003 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.201179981 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.201273918 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.201360941 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.201360941 CET	49864	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.201431990 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.201461077 CET	443	49864	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.203965902 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.204004049 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.204071045 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.204225063 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.204238892 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.431880951 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.432706118 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.432729959 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.433244944 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.433249950 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.656863928 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.659961939 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.660023928 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.660033941 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.660083055 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.660135984 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.660161018 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.660176992 CET	49865	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.660183907 CET	443	49865	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.661678076 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.662060022 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.662081003 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.662530899 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.662537098 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.662837029 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.662888050 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.662961960 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.663079023 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.663098097 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.878943920 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.880044937 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.880105972 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.880151987 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.880172014 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.880181074 CET	49866	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.880187035 CET	443	49866	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.882977962 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.883008957 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:25.883085012 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.883235931 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:25.883248091 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153160095 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153233051 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153290987 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.153322935 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153356075 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153532982 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.153597116 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.153599024 CET	49867	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.153618097 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.153630972 CET	443	49867	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.156647921 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.156673908 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.156745911 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.156871080 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.156877041 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.438543081 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.439069986 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.439120054 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.439547062 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.439554930 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.887394905 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.888191938 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.888254881 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.888293982 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.888310909 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.888320923 CET	49868	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.888326883 CET	443	49868	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.891179085 CET	49873	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.891227961 CET	443	49873	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:26.891328096 CET	49873	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.891467094 CET	49873	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:26.891480923 CET	443	49873	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.022404909 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.023061037 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.023092985 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.023412943 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.023420095 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.500138998 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.503030062 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.503103018 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.503201962 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.503201962 CET	49869	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.503235102 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.503248930 CET	443	49869	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.505897999 CET	49874	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.505930901 CET	443	49874	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.506000996 CET	49874	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.506123066 CET	49874	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.506129026 CET	443	49874	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.527160883 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.528130054 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.528162003 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.528774023 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.528779984 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.700874090 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.701344013 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.701361895 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.701811075 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.701814890 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.966134071 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.966593027 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.966614008 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.967119932 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.967124939 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.981194973 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.984698057 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.984759092 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.984802008 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.984818935 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.984829903 CET	49870	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.984836102 CET	443	49870	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.987457991 CET	49875	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.987504005 CET	443	49875	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:27.987575054 CET	49875	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.987762928 CET	49875	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:27.987783909 CET	443	49875	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.149498940 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.153676033 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.153750896 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.153764009 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.153779984 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.153846979 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.153961897 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.153961897 CET	49871	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.153976917 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.153984070 CET	443	49871	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.156708002 CET	49876	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.156728983 CET	443	49876	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.156807899 CET	49876	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.157001019 CET	49876	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.157011032 CET	443	49876	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.421380997 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.424576044 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.424638033 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.424695015 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.424712896 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.424722910 CET	49872	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.424727917 CET	443	49872	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.427440882 CET	49877	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.427489042 CET	443	49877	13.107.246.63	192.168.2.5
Nov 20, 2024 17:28:28.427552938 CET	49877	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.427685022 CET	49877	443	192.168.2.5	13.107.246.63
Nov 20, 2024 17:28:28.427695990 CET	443	49877	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 17:27:07.941663027 CET	53	52157	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:07.960839033 CET	53	53226	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:09.383244038 CET	56131	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:09.383374929 CET	59476	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:09.962089062 CET	53	59476	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:09.962102890 CET	53	56131	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:10.803067923 CET	53	56825	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:11.623516083 CET	56586	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:11.623637915 CET	60185	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:11.760524988 CET	53	56586	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:11.760649920 CET	53	60185	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:14.708014011 CET	54890	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:14.708014965 CET	49156	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:14.945775032 CET	53	49156	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:14.954654932 CET	53	54890	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:18.469217062 CET	62559	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:18.469368935 CET	65056	53	192.168.2.5	1.1.1.1
Nov 20, 2024 17:27:18.708307981 CET	53	62559	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:18.708739042 CET	53	65056	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:27.934009075 CET	53	63307	1.1.1.1	192.168.2.5
Nov 20, 2024 17:27:46.765733004 CET	53	59816	1.1.1.1	192.168.2.5
Nov 20, 2024 17:28:07.245289087 CET	53	64480	1.1.1.1	192.168.2.5
Nov 20, 2024 17:28:09.374088049 CET	53	50315	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 17:27:09.383244038 CET	192.168.2.5	1.1.1.1	0x7572	Standard query (0)	signin.techinsights.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:09.383374929 CET	192.168.2.5	1.1.1.1	0xccbd	Standard query (0)	signin.techinsights.com	65	IN (0x0001)	false
Nov 20, 2024 17:27:11.623516083 CET	192.168.2.5	1.1.1.1	0xcf16	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:11.623637915 CET	192.168.2.5	1.1.1.1	0x676c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 17:27:14.708014011 CET	192.168.2.5	1.1.1.1	0x8822	Standard query (0)	cdn.auth0.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:14.708014965 CET	192.168.2.5	1.1.1.1	0x3f9e	Standard query (0)	cdn.auth0.com	65	IN (0x0001)	false
Nov 20, 2024 17:27:18.469217062 CET	192.168.2.5	1.1.1.1	0xa0fc	Standard query (0)	cdn.auth0.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:18.469368935 CET	192.168.2.5	1.1.1.1	0x1978	Standard query (0)	cdn.auth0.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 17:27:09.962089062 CET	1.1.1.1	192.168.2.5	0xccbd	No error (0)	signin.techinsights.com	techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:27:09.962102890 CET	1.1.1.1	192.168.2.5	0x7572	No error (0)	signin.techinsights.com	techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:27:09.962102890 CET	1.1.1.1	192.168.2.5	0x7572	No error (0)	techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com		104.19.168.24	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:09.962102890 CET	1.1.1.1	192.168.2.5	0x7572	No error (0)	techinsights-auth2-cd-2mkmnn4elujq8xtb.edge.tenants.us.auth0.com		104.19.167.24	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:11.760524988 CET	1.1.1.1	192.168.2.5	0xcf16	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:11.760649920 CET	1.1.1.1	192.168.2.5	0x676c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 17:27:14.945775032 CET	1.1.1.1	192.168.2.5	0x3f9e	No error (0)	cdn.auth0.com	dp0wn1kjwhg75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:27:14.954654932 CET	1.1.1.1	192.168.2.5	0x8822	No error (0)	cdn.auth0.com	dp0wn1kjwhg75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:27:14.954654932 CET	1.1.1.1	192.168.2.5	0x8822	No error (0)	dp0wn1kjwhg75.cloudfront.net		18.165.217.42	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:18.708307981 CET	1.1.1.1	192.168.2.5	0xa0fc	No error (0)	cdn.auth0.com	dp0wn1kjwhg75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:27:18.708307981 CET	1.1.1.1	192.168.2.5	0xa0fc	No error (0)	dp0wn1kjwhg75.cloudfront.net		18.165.217.42	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:27:18.708739042 CET	1.1.1.1	192.168.2.5	0x1978	No error (0)	cdn.auth0.com	dp0wn1kjwhg75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

signin.techinsights.com

fs.microsoft.com

https:

cdn.auth0.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.19.168.24	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:11 UTC	1866	OUT	GET /passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_ [TRUNCATED] Host: signin.techinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:12 UTC	1162	IN	HTTP/1.1 302 Found Date: Wed, 20 Nov 2024 16:27:11 GMT Content-Length: 0 Connection: close Location: https://signin.techinsights.com/login/callback?state=EpmdgIjzuQqaXpNwBjHqqVI1l707bUPz CF-Ray: 8e59ce556da34374-EWR CF-Cache-Status: DYNAMIC Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform Set-Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; Max-Age=31557600; Path=/; Expires=Thu, 20 Nov 2025 22:27:11 GMT; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; Path=/; Expires=Sat, 23 Nov 2024 16:27:11 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; Max-Age=31557600; Path=/; Expires=Thu, 20 Nov 2025 22:27:11 GMT; HttpOnly; Secure
2024-11-20 16:27:12 UTC	561	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 75 74 68 30 5f 63 6f 6d 70 61 74 3d 73 25 33 41 76 31 2e 67 61 64 7a 5a 58 4e 7a 61 57 39 75 67 71 5a 6f 59 57 35 6b 62 47 58 45 51 46 32 5a 55 46 4d 4c 65 6f 4d 6a 45 75 48 39 58 5a 35 79 4f 64 4b 5a 4b 7a 35 76 6e 49 4b 6a 78 37 5a 75 34 75 43 39 46 73 72 54 7a 32 41 4c 54 4d 57 55 73 4e 44 71 77 59 43 73 39 42 48 69 39 77 43 55 39 42 58 48 68 2d 58 56 4d 68 78 45 5f 6f 57 5a 44 33 65 6d 59 32 39 76 61 32 6c 6c 67 36 64 6c 65 48 42 70 63 6d 56 7a 31 5f 5f 4d 7a 54 4d 41 5a 30 49 43 58 36 35 76 63 6d 6c 6e 61 57 35 68 62 45 31 68 65 45 46 6e 5a 63 34 50 63 78 51 41 71 48 4e 68 62 57 56 54 61 58 52 6c 70 47 35 76 62 6d 55 2e 4d 37 6f 6c 67 75 56 42 59 69 6a 6f 31 6f 7a 55 65 38 47 51 55 36 48 32 65 4c 41 6e 35 39 33 Data Ascii: Set-Cookie: auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.19.168.24	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:12 UTC	1435	OUT	GET /login/callback?state=EpmdgIjzuQqaXpNwBjHqqVI1l707bUPz HTTP/1.1 Host: signin.techinsights.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
2024-11-20 16:27:12 UTC	668	IN	HTTP/1.1 302 Found Date: Wed, 20 Nov 2024 16:27:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 156 Connection: close Location: /authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ CF-Ray: 8e59ce598fb20f71-EWR CF-Cache-Status: DYNAMIC Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept X-Auth0-L: 0.074 X-Auth0-RequestId: b742fcaf81eba7bc25ab X-Content-Type-Options: nosniff X-RateLimit-Limit: 300 X-RateLimit-Remaining: 298 X-RateLimit-Reset: 1732120033 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-11-20 16:27:12 UTC	156	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 61 75 74 68 6f 72 69 7a 65 2f 72 65 73 75 6d 65 3f 73 74 61 74 65 3d 72 2d 66 4c 5a 75 54 54 2d 66 34 78 32 6f 31 4c 50 49 55 63 61 39 58 6e 50 63 73 4c 31 33 65 4a 22 3e 2f 61 75 74 68 6f 72 69 7a 65 2f 72 65 73 75 6d 65 3f 73 74 61 74 65 3d 72 2d 66 4c 5a 75 54 54 2d 66 34 78 32 6f 31 4c 50 49 55 63 61 39 58 6e 50 63 73 4c 31 33 65 4a 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ">/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	104.19.168.24	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:13 UTC	1437	OUT	GET /authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ HTTP/1.1 Host: signin.techinsights.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
2024-11-20 16:27:14 UTC	612	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 20 Nov 2024 16:27:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2158 Connection: close CF-Ray: 8e59ce664cd4182d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-store, max-age=0, no-transform ETag: W/"86e-NAxxWMAZS+EGXWpm/TUZA7GfdC0" Strict-Transport-Security: max-age=31536000; includeSubDomains Pragma: no-cache X-Auth0-L: 0.031 X-Auth0-RequestId: 1713f25ef3041046a06b X-Content-Type-Options: nosniff X-RateLimit-Limit: 300 X-RateLimit-Remaining: 298 X-RateLimit-Reset: 1732120035 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-11-20 16:27:14 UTC	757	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 75 74 68 30 2e 63 6f 6d 2f 73 74 79 6c 65 67 75 69 64 65 2f 6c 61 74 65 73 74 2f 69 6e 64 65 78 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 75 74 68 30 2e 63 6f 6d 2f 62 61 63 6b 65 6e 64 2d 74 65 6d 70 6c 61 74 65 73 2f 6d 61 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: <html> <head> <meta charset="utf-8"> <link href="https://cdn.auth0.com/styleguide/latest/index.min.css" rel="stylesheet" /> <link rel="stylesheet" href="https://cdn.auth0.com/backend-templates/main.css"> <meta name="viewport" content="wi
2024-11-20 16:27:14 UTC	1369	IN	Data Raw: 68 33 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 74 69 74 6c 65 22 3e 74 65 63 68 69 6e 73 69 67 68 74 73 2d 61 75 74 68 32 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 3c 68 33 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 73 75 62 74 69 74 6c 65 22 3e 4f 6f 70 73 21 2c 20 73 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 62 6f 64 79 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 54 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 69 73 63 Data Ascii: h3 class="error-title">techinsights-auth2</h3> <h3 class="error-subtitle">Oops!, something went wrong</h3> </div> <div class="error-body"> <p class="error-message"> There could be a misc
2024-11-20 16:27:14 UTC	32	IN	Data Raw: 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: =1"></script> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 16:27:14 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF57) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=1064 Date: Wed, 20 Nov 2024 16:27:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	2.23.161.164	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 16:27:17 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=1133 Date: Wed, 20 Nov 2024 16:27:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 16:27:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:16 UTC	565	OUT	GET /styleguide/latest/index.min.css HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://signin.techinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:18 UTC	708	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 259429 Connection: close Date: Wed, 20 Nov 2024 16:27:18 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 03 Jan 2017 19:34:31 GMT ETag: "9357a87b18a1d356741527b43d110705" Cache-Control: public, max-age=300 x-amz-version-id: s5gNrOynyxO2.89b_njJNZ9heZAhlr7e Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: yOGW2rmwl_td1XE8HwFm67JLfIyZcHLCtRpUmoWWBwxkYqjQyZx--g== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:18 UTC	8192	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 70 72 6f 67 72 65 73 73 2c 73 75 62 2c 73 75 70 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 73 72 2d 6f 6e 6c 79 2c 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 75 74 74 6f 6e 2c 68 72 2c 69 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden/progress,sub,sup{vertical-align:baseline}.sr-only,svg:not(:root){overflow:hidden}button,hr,i
2024-11-20 16:27:18 UTC	16384	IN	Data Raw: 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 49 6e 58 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 3b 6f 70 61 63 69 74 79 3a 30 7d 34 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 32 30 64 65 67 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e Data Ascii: ackface-visibility:visible;animation-name:flip}@keyframes flipInX{0%{transform:perspective(400px) rotate3d(1,0,0,90deg);transition-timing-function:ease-in;opacity:0}40%{transform:perspective(400px) rotate3d(1,0,0,-20deg);transition-timing-function:ease-in
2024-11-20 16:27:18 UTC	9742	IN	Data Raw: 31 34 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b2 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 34 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b3 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 34 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b4 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 34 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b5 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 34 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b6 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 34 39 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 b7 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 31 35 30 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee Data Ascii: 144:before{content:""}.icon-budicon-145:before{content:""}.icon-budicon-146:before{content:""}.icon-budicon-147:before{content:""}.icon-budicon-148:before{content:""}.icon-budicon-149:before{content:""}.icon-budicon-150:before{content:"
2024-11-20 16:27:18 UTC	16384	IN	Data Raw: 62 75 64 69 63 6f 6e 2d 33 39 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 ac 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 33 39 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 ad 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 33 39 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 ae 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 33 39 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 af 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 33 39 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 b0 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 33 39 39 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 b1 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 34 30 30 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: budicon-394:before{content:""}.icon-budicon-395:before{content:""}.icon-budicon-396:before{content:""}.icon-budicon-397:before{content:""}.icon-budicon-398:before{content:""}.icon-budicon-399:before{content:""}.icon-budicon-400:before{co
2024-11-20 16:27:18 UTC	1024	IN	Data Raw: 63 6f 6e 2d 38 31 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 90 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 31 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 91 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 92 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 31 37 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 93 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 31 38 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 94 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 31 39 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 95 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 32 30 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: con-814:before{content:""}.icon-budicon-815:before{content:""}.icon-budicon-816:before{content:""}.icon-budicon-817:before{content:""}.icon-budicon-818:before{content:""}.icon-budicon-819:before{content:""}.icon-budicon-820:before{conten
2024-11-20 16:27:19 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b aa 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b ab 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b ac 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b ad 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b ae 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 35 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b af 22 7d 2e 69 63 6f 6e 2d 62 75 64 69 63 6f 6e 2d 38 34 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b b0 22 7d 2e 69 Data Ascii: fore{content:""}.icon-budicon-841:before{content:""}.icon-budicon-842:before{content:""}.icon-budicon-843:before{content:""}.icon-budicon-844:before{content:""}.icon-budicon-845:before{content:""}.icon-budicon-846:before{content:""}.i
2024-11-20 16:27:19 UTC	1024	IN	Data Raw: 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3a 68 6f 76 65 72 3e Data Ascii: tfoot>tr.info>th,.table>tfoot>tr>td.info,.table>tfoot>tr>th.info,.table>thead>tr.info>td,.table>thead>tr.info>th,.table>thead>tr>td.info,.table>thead>tr>th.info{background-color:#d9edf7}.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr.info:hover>
2024-11-20 16:27:19 UTC	15990	IN	Data Raw: 74 64 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: td.danger,.table>tbody>tr>th.danger,.table>tfoot>tr.danger>td,.table>tfoot>tr.danger>th,.table>tfoot>tr>td.danger,.table>tfoot>tr>th.danger,.table>thead>tr.danger>td,.table>thead>tr.danger>th,.table>thead>tr>td.danger,.table>thead>tr>th.danger{background-
2024-11-20 16:27:19 UTC	1418	IN	Data Raw: 61 66 64 39 65 65 7d 2e 62 67 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 61 2e 62 67 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 2c 61 2e 62 67 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 65 63 62 35 7d 2e 62 67 2d 64 61 6e 67 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 7d 61 2e 62 67 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 2c 61 2e 62 67 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 34 62 39 62 39 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 6d 61 72 67 69 6e 3a 35 36 70 78 20 30 20 32 38 70 78 Data Ascii: afd9ee}.bg-warning{background-color:#fcf8e3}a.bg-warning:focus,a.bg-warning:hover{background-color:#f7ecb5}.bg-danger{background-color:#f2dede}a.bg-danger:focus,a.bg-danger:hover{background-color:#e4b9b9}.page-header{padding-bottom:13px;margin:56px 0 28px
2024-11-20 16:27:19 UTC	16384	IN	Data Raw: 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 31 34 70 78 20 32 38 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 2e 35 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 35 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 61 6c 65 72 74 2c 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 38 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 2e 73 6d 61 6c 6c 2c 62 6c 6f 63 6b 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 20 73 6d 61 6c 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 Data Ascii: tialism{font-size:90%}blockquote{padding:14px 28px;margin:0 0 28px;font-size:17.5px;border-left:5px solid #eee;font-style:italic}.alert,address{margin-bottom:28px}blockquote .small,blockquote footer,blockquote small{display:block;font-size:80%;line-height

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49716	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:16 UTC	560	OUT	GET /backend-templates/main.css HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://signin.techinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:18 UTC	656	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10432 Connection: close Date: Wed, 20 Nov 2024 16:27:19 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 04 Apr 2017 20:35:27 GMT ETag: "a0cfb67e0bb38eccbfad358b34eae828" x-amz-version-id: MgCvivs3wxxxvhbJVkjBKX0QzHOAvslY Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: Lt2fxtq1hMWINEth5XwzoXDugGuIoBiygpZEo-fpeSQN6TjPgtx6iA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:18 UTC	10432	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 36 66 39 3b 0a 7d 0a 2e 63 66 3a 62 65 66 6f 72 65 2c 0a 2e 63 66 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 20 2f 2a 20 31 20 2a 2f 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 20 2f 2a 20 32 20 2a 2f 0a 7d 0a 2e 63 66 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 75 6e 68 61 6e 64 6c 65 64 2d 65 72 72 6f 72 2d 63 6f 6e 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: body { margin: 0; padding: 0; background-color: #f4f6f9;}.cf:before,.cf:after { content: " "; /* 1 / display: table; / 2 */}.cf:after { clear: both;}.unhandled-error-cont { text-align: center; overflow: hidden; background-color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49717	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:16 UTC	549	OUT	GET /backend-templates/main.js?v=1 HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signin.techinsights.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:18 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 698 Connection: close Date: Wed, 20 Nov 2024 16:27:19 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 28 Sep 2018 17:40:38 GMT ETag: "0f81e3b9236c8ffc79c7cc852a54f38d" x-amz-version-id: mXF1zWEI5fYfKmWAbfsmvlm2BVGmtOeT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1f44ef8e17e3b0f8dfa4a6c642cd3f56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: IF2u-R-0NV9gxjqQpxhyLzB8a7lLACwmC6kSPn742ROwr2MA06OJuQ== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:18 UTC	698	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 76 61 72 20 74 6f 67 67 6c 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 2e 74 6f 67 67 6c 65 2d 64 65 74 61 69 6c 73 27 29 3b 0a 20 20 76 61 72 20 64 65 74 61 69 6c 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 72 72 6f 72 2d 64 65 74 61 69 6c 73 27 29 3b 0a 0a 20 20 74 6f 67 67 6c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 Data Ascii: document.addEventListener('DOMContentLoaded', function() { var toggle = document.querySelector('.error-footer .toggle-details'); var details = document.querySelector('.error-details'); toggle.addEventListener('click', function(e) { e.preventDef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:20 UTC	366	OUT	GET /backend-templates/main.js?v=1 HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:22 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 698 Connection: close Date: Wed, 20 Nov 2024 16:27:22 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 28 Sep 2018 17:40:38 GMT ETag: "0f81e3b9236c8ffc79c7cc852a54f38d" x-amz-version-id: mXF1zWEI5fYfKmWAbfsmvlm2BVGmtOeT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a95adf7afe468fe543cb5750140a2bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: GhcjzcmkFi8gvUVvPkpihAlpDWF63slmfQUptzg4dYklodUImRrZJw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:22 UTC	698	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 76 61 72 20 74 6f 67 67 6c 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 72 72 6f 72 2d 66 6f 6f 74 65 72 20 2e 74 6f 67 67 6c 65 2d 64 65 74 61 69 6c 73 27 29 3b 0a 20 20 76 61 72 20 64 65 74 61 69 6c 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 72 72 6f 72 2d 64 65 74 61 69 6c 73 27 29 3b 0a 0a 20 20 74 6f 67 67 6c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 Data Ascii: document.addEventListener('DOMContentLoaded', function() { var toggle = document.querySelector('.error-footer .toggle-details'); var details = document.querySelector('.error-details'); toggle.addEventListener('click', function(e) { e.preventDef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49726	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:21 UTC	641	OUT	GET /styleguide/latest/lib/font/avenir-next/avenir-next-regular.woff2 HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signin.techinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.auth0.com/styleguide/latest/index.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:22 UTC	817	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 31944 Connection: close Date: Wed, 20 Nov 2024 16:27:23 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 03 Jan 2017 19:34:34 GMT ETag: "851774df81a3d857ed6d149e0b8e6c60" Cache-Control: public, max-age=300 x-amz-version-id: mQFCr2jXiTlrCF7Cw8imgFDyGCp_5pfi Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 71e2e03bef11cc0381cb2986b1b064b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: lc9o0TnKz1Xn3keuEajniVXzw49s7YZJ1srqa3GH-r8Bk0bY3SDNCg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:22 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7c c8 00 0f 00 00 00 01 97 4c 00 00 7c 69 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b6 7e 1c a2 44 06 60 16 8b 60 00 89 1a 11 08 0a 84 99 3c 83 9d 7c 01 36 02 24 03 96 68 13 c6 52 0b 96 6c 00 04 20 05 ae 28 07 20 5b 1b 4d 71 05 dd b6 5d d4 28 20 28 6f 60 b3 4c be df a9 3c 5c 89 e6 d8 3d 43 2b a3 a5 a7 98 4f 8b 99 b9 cb e5 03 6c 3a f0 2f 57 7a 6e 33 e6 01 95 c2 64 ff ff ff 9f 93 74 8c e1 18 7e 40 59 5d ad 77 26 85 68 16 a2 a0 dc 0a 89 5d a6 67 90 50 ec 71 9c 51 46 b8 4c 7c 07 0a 15 18 48 1c d2 54 48 90 91 a8 20 26 f9 a4 2e 84 20 4d 8d 8c 8e 30 8b ae b1 e1 de 4c cd 56 17 c4 e4 79 ec 29 d4 17 d7 16 26 17 95 fb c7 0b e1 15 7a a7 75 6e 61 35 bf e3 39 cc ee d8 fd 6a f6 23 89 b3 e1 6a 7b a7 5d 9e c9 Data Ascii: wOF2\|L\|i~D``<\|6$hRl ( [Mq]( (o`L<\=C+Ol:/Wzn3dt~@Y]w&h]gPqQFL\|HTH &. M0LVy)&zuna59j#j{]
2024-11-20 16:27:23 UTC	900	IN	Data Raw: 69 46 5d 37 33 da 2b 91 86 b7 17 8d 3e 3b 2b 45 29 31 ee 51 84 20 d5 c0 e0 3f 19 b4 fa 22 0d a5 76 fd 70 90 8a 19 5d 81 7d bd 95 e1 78 b4 3e 8c 18 8c 00 1d dd 8b 69 fb a5 4a a8 0c 2a 62 09 9c 3f cb e8 a9 7a c5 11 85 dc 47 ea a5 1a 12 6c 25 57 20 b7 a4 60 e0 db 7a 22 87 a3 23 de 3e 62 59 ac 80 49 47 f0 d4 13 9e 28 58 ff 13 ee 83 3d fe 77 72 04 12 6d 63 49 3d fd 57 fd 33 ec 6a 3a 9e c5 5f 2d 95 7a dd df 83 d2 0e ad 99 24 a5 95 71 a9 ef e7 92 48 02 f5 5b 3a 3c 07 82 4c c2 ed 11 06 21 67 37 09 50 e4 bf ec 73 08 53 fc 1c a0 4b f1 ae f5 86 c4 eb 14 ec 3f c2 5e 43 b2 7c de b7 14 92 89 c3 8d 68 b8 43 42 33 cc 74 43 b0 f4 47 d3 5a 0a 7d ff 93 33 90 38 9d 57 0c 5c db 5a 43 71 4b a9 2b 83 59 1f ef 31 5e bd 22 74 f8 ea d8 6a 16 3d 57 99 db 0a b7 b6 82 3d e2 34 66 1c Data Ascii: iF]73+>;+E)1Q ?"vp]}x>iJ*b?zGl%W `z"#>bYIG(X=wrmcI=W3j:_-z$qH[:<L!g7PsSK?^C\|hCB3tCGZ}38W\ZCqK+Y1^"tj=W=4f
2024-11-20 16:27:23 UTC	14660	IN	Data Raw: c2 4d bd d7 86 e1 8f 8d d1 b7 da 3d 21 fa bc c9 90 e5 7d a2 e2 78 9b 5d e2 c9 df 37 2a 14 3b 42 76 cb 68 3b 1a df 3c 66 79 a1 09 25 f7 8f 99 5d ed b3 98 09 6f 3d 26 b3 f4 17 de b3 32 6e a3 6b 20 b9 47 05 0f 15 70 25 31 e4 b5 a2 29 49 12 bb c2 94 ac a4 e0 d8 09 09 1d 4a f6 aa cc b7 a2 68 09 a3 dc 35 6c 58 73 77 b1 dd fa 73 59 21 f4 5e 1d ac 29 36 0c 6c 24 40 bb 2f 0e 6c 40 3a ee eb 17 1b 96 c3 85 61 c1 63 c3 4f 77 84 db 28 b0 11 07 ab 47 9c 0a 1b 8a 75 71 71 03 c4 86 b8 5a e6 fd d8 82 8e 74 46 87 e6 97 39 95 73 4b 3c 27 ee f0 c2 a6 06 ee ef 0e b7 de e1 89 19 52 cf f9 b8 10 d6 e0 ca a0 c6 de ec d6 da ab af ae 51 52 4a c7 d9 0a 73 68 21 86 61 62 0c b5 14 fd f3 78 f3 76 f7 80 a6 84 a6 ea 3e 3a c8 a6 96 54 27 99 05 89 5a 37 bc 19 f4 70 f1 a0 a5 b1 ce 00 6a c2 Data Ascii: M=!}x]7*;Bvh;<fy%]o=&2nk Gp%1)IJh5lXswsY!^)6l$@/l@:acOw(GuqqZtF9sK<'RQRJsh!abxv>:T'Z7pj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:21 UTC	640	OUT	GET /styleguide/latest/lib/font/avenir-next/avenir-next-medium.woff2 HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signin.techinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.auth0.com/styleguide/latest/index.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:22 UTC	817	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 32236 Connection: close Date: Wed, 20 Nov 2024 16:27:23 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 03 Jan 2017 19:34:34 GMT ETag: "13068386fe66fd9afd7e13e415885f50" Cache-Control: public, max-age=300 x-amz-version-id: 0dOlBROtZt3h3zMSus9QSR_.XrjXSxty Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 d6c161424e808aac68bf94834fb61044.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: uQraSoWsYpWbgnKYKBv6koRBlOq3EkzG6LJJUqq7OOGDGG4ucC8Jlw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:23 UTC	8192	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7d ec 00 0f 00 00 00 01 96 c4 00 00 7d 8e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b8 0c 1c a2 44 06 60 16 8b 60 00 89 1a 11 08 0a 84 96 08 83 9b 46 01 36 02 24 03 96 68 13 c7 7a 0b 96 6c 00 04 20 05 ae 1f 07 20 5b 12 4d 91 01 d9 ee 6f 6d 2f a4 88 db 06 90 dd ad 01 f5 30 d7 0d 71 8c ed 84 61 a1 73 6c c9 0f dc 90 cc 9a 70 41 d4 5b 47 9c 70 db 28 be 1d 9a 5d b9 51 f6 ff ff ff ff 99 c9 44 8e 4c ae ed 25 4d e3 e1 81 6d 83 69 a6 9d dd 25 a2 c7 c8 21 53 48 84 ea a9 ba 32 f9 d8 34 67 a8 54 c3 7d b1 e4 2a 2c fa b8 0c 6a 6b 8e 90 6c 66 23 74 45 4d f1 2f cc 0e 69 62 3b 95 cb 01 83 60 16 37 60 62 03 98 9c 60 56 d9 d1 ba 5d 68 c2 67 03 59 70 04 3a 88 02 2f 05 37 26 a2 18 62 1d 97 11 45 de ce 03 87 cb 23 Data Ascii: wOF2}}D``F6$hzl [Mom/0qaslpA[Gp(]QDL%Mmi%!SH24gT}*,jklf#tEM/ib;`7`b`V]hgYp:/7&bE#
2024-11-20 16:27:23 UTC	9092	IN	Data Raw: b7 67 78 b9 cd 1f b0 d1 b1 e6 34 76 9b b9 e5 1c b7 b0 d3 ac 86 7d 80 6a d3 b4 ec f4 35 6f b8 87 7a bb fc 65 33 4e b7 31 91 cd 97 16 ff d4 7c 33 ba 30 87 49 fd fe 1b a9 0d 7e ab 94 2c 4a 1f 70 75 f8 57 9b fb 08 ba aa 7d a3 1c 87 2e cc ca 43 ed e5 c3 48 6d c3 2c f1 eb 48 95 15 e8 6b 80 26 5e a7 e8 f6 fa 73 45 7e e5 f3 86 7f 76 63 29 e9 c3 7e 24 8a b0 39 59 ae 99 a7 5a 52 61 e5 d3 7d 4c a8 7b d0 f5 65 9e 17 1c 40 6d a1 4b 13 33 42 be e1 45 1a a3 d4 2b 98 4e 38 49 af 19 33 73 5c bf c5 6d 72 41 ed d4 72 37 cd 28 76 b1 71 95 41 e5 8f 58 14 bf 52 08 57 4f e7 22 34 41 5d 54 3b a4 75 29 46 89 6a 51 8a ea 89 ea bc 97 59 a8 50 63 84 95 16 2d 7a bc 4e 83 b4 d4 84 19 8f db a3 0f 3d 11 04 e9 00 02 3d 2c d8 fb 0a a0 5d f8 79 79 e5 44 72 49 61 2e 5d fb 9b 9e 9d 1b 73 f4 Data Ascii: gx4v}j5oze3N1\|30I~,JpuW}.CHm,Hk&^sE~vc)~$9YZRa}L{e@mK3BE+N8I3s\mrAr7(vqAXRWO"4A]T;u)FjQYPc-zN==,]yyDrIa.]s
2024-11-20 16:27:23 UTC	14952	IN	Data Raw: a1 3d 74 44 85 f1 43 ee 6e d4 e3 18 72 ca 46 3d eb 9c f4 28 bf 96 de 14 8e 0a 19 99 fe e9 dd 5c 88 f2 7b 71 cb 5f 1b 20 dd 64 91 3b 95 69 44 f2 98 e2 40 56 10 68 9c 0b b7 d7 08 04 0f 13 68 2d 32 8a 8e e7 0c 00 c4 d1 d1 22 7a 81 fd f3 8b e7 ef ba b8 32 bd 38 7d 78 c0 7f 5f 50 13 da d5 5a 94 83 b6 a2 3e 36 0d f9 53 3c 16 59 52 8a 4e 76 a3 b3 5a d0 39 3f 2f 5d 19 68 eb f8 75 b2 4a 27 31 95 17 c4 18 32 20 fb 32 55 20 fa 3c 64 de e3 98 46 c2 5a d4 59 3f bc 59 e5 b1 70 b7 80 0a a3 9c 06 c3 1c 72 07 ce f8 e3 c1 43 ae 67 a1 d6 4f b9 7d 30 d3 55 6e 04 1c fb 48 2b c9 d2 8a 7b c6 48 ce 33 34 13 9a b1 11 ef 8e 45 ab 09 10 03 b1 3a a5 09 35 11 ad 26 e6 a0 17 85 ac e6 eb fe df 2a ce 22 6d e0 51 75 48 28 ca 09 e9 0a c2 87 67 bc d1 a9 18 68 2c fc f5 0e 37 d0 40 14 df 91 Data Ascii: =tDCnrF=(\{q_ d;iD@Vhh-2"z28}x_PZ>6S<YRNvZ9?/]huJ'12 2U <dFZY?YprCgO}0UnH+{H34E:5&*"mQuH(gh,7@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:21 UTC	648	OUT	GET /styleguide/latest/lib/font/avenir-next/avenir-next-regular-italic.woff2 HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signin.techinsights.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.auth0.com/styleguide/latest/index.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:22 UTC	817	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 33116 Connection: close Date: Wed, 20 Nov 2024 16:27:22 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 03 Jan 2017 19:34:34 GMT ETag: "d97f2f7c6cba5c5250a56da8df848e23" Cache-Control: public, max-age=300 x-amz-version-id: Bbziqstg1OInngHAFJK4lXY0kTLHzGGS Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 9b06261b360f2fc15a3d94db42c0a168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 4Gk7lCsrB-yBN11EUCTAJ2rZ3i1Op8tuJ3NiuFKf5lXA3FgdAnvBiw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:22 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 81 5c 00 0f 00 00 00 01 a2 84 00 00 80 fd 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b9 0c 1c a2 44 06 60 16 8b 60 00 89 1a 11 08 0a 84 ab 1c 83 a8 4f 01 36 02 24 03 96 68 13 c9 28 0b 96 6c 00 04 20 05 ae 1f 07 20 5b c9 54 71 24 da d9 7d 45 83 b9 1d b0 75 93 7b 6e 70 44 9c c3 0e 51 f9 a3 ce b1 35 cf 83 8b 06 14 75 41 75 4b 07 1e 74 db 00 7e 6c b2 33 39 7f f6 ff ff 7f e2 d1 18 71 bb d5 d6 7d f9 17 3d 00 95 4d 5b 22 b7 ad 87 44 1f d0 05 0d 7b e2 b8 66 d7 01 cf 3d c3 9e b8 66 de 4c b2 5d ee 92 c2 68 49 d5 60 d2 d7 49 25 b2 c1 26 86 1d 1c ef 74 4c 69 1c e1 b4 f1 c8 b0 15 6c f4 b8 50 4d 96 e6 8a 03 23 24 ed aa 5f f1 d1 a0 3a bb a8 0b e6 c2 aa 33 7b 54 94 14 97 4c 05 45 45 29 48 51 0a 92 a4 a0 95 68 Data Ascii: wOF2\D``O6$h(l [Tq$}Eu{npDQ5uAuKt~l39q}=M["D{f=fL]hI`I%&tLilPM#$_:3{TLEE)HQh
2024-11-20 16:27:22 UTC	354	IN	Data Raw: 87 b5 d5 18 ed ea b0 b3 7f 93 f9 55 cb 94 0a 65 f4 d4 d6 c8 7a b3 0c 6d 8d af 7b bf 6b 04 fc b3 35 96 9e 58 eb b5 dc 97 18 2d 2e 5e 0b bc f6 a3 ec 2a eb c0 75 b4 5d 61 dd 24 a0 54 55 25 56 4a 85 9d ae 90 e8 ce fe af 0c 5b 5d db c3 fc 7c ec 12 8b df c8 b0 77 00 a3 06 d6 cd 5b dc cb 8d 2e 82 99 80 e3 1f f9 03 80 6f f0 ab 5d 65 06 76 50 e8 59 89 8a 4d 4a 81 97 be e1 7b 72 2d 4b c6 f8 e8 55 85 fa 14 2a 81 71 a9 a0 18 6b c8 e4 32 31 ea 8e 51 71 72 2e 69 f9 21 aa 36 df 5a cf 9a 93 92 aa 57 9e e8 a4 98 c2 c6 bf 28 e3 64 b1 ce 7c d3 17 52 0f b2 5c 52 5d 04 43 bf 51 5e 0b a6 dc ea 6d 4b b2 d4 43 ee a5 b8 60 03 bf c9 e9 ad 83 f5 84 e4 d3 6a c3 ed af d1 38 b1 08 4b e4 86 66 d3 82 62 86 7d 7a 1c 12 17 40 e5 e4 20 b8 16 77 be 82 01 ff 87 d8 46 0d 4a e8 ea 86 69 2c 18 Data Ascii: Uezm{k5X-.^u]a$TU%VJ[]\|w[.o]evPYMJ{r-KUqk21Qqr.i!6ZW(d\|R\R]CQ^mKC`j8Kfb}z@ wFJi,
2024-11-20 16:27:22 UTC	9546	IN	Data Raw: 8f 89 c1 e2 26 16 ab 99 fd 3b 46 b1 1d 6c be d0 e6 d8 22 a0 87 36 62 df 16 dc ec e0 f6 ba a7 9a a9 c7 bb 97 6d c4 5c 46 d5 5f 5a 6c 5f 07 d0 dc b2 20 40 ac 96 3b c8 ff 2a 23 f1 8c 18 66 b5 54 5f 2d f5 50 a3 64 97 48 c7 ab 75 16 d4 0a f4 04 d2 be ac 61 8c 8c 1b 3f f0 71 9c 54 94 e7 a8 96 f8 6c ed 32 52 6f 39 55 15 73 16 57 c0 2c a5 f8 44 34 7b 43 1f 74 05 4d 73 52 02 c0 71 c4 1d f6 20 29 1a 14 39 15 85 31 15 24 d9 ef 16 2b bf b3 1f 98 d6 d9 fc bf 05 83 bf 51 ab 56 4c b1 a7 04 c4 0a 82 d7 51 ee 49 ec 01 6c f6 3e 1c ee 7d f9 ec 11 10 7e 33 3f 3c 09 77 99 b0 5e 55 c5 46 6b a4 ee 89 8b 5a 5e 32 e6 2e 0e ed 4a a0 7e 1a 20 ee 75 05 83 81 de e5 58 d3 c3 09 5a 0f 85 ea 58 10 bf 5e 8c 15 a4 8d 78 b4 1e dd d7 6c b6 d7 e2 f5 0b 9f 08 58 e9 7e 92 60 ae 32 57 f5 03 0d Data Ascii: &;Fl"6bm\F_Zl_ @;*#fT_-PdHua?qTl2Ro9UsW,D4{CtMsRq )91$+QVLQIl>}~3?<w^UFkZ^2.J~ uXZX^xlX~`2W
2024-11-20 16:27:22 UTC	6832	IN	Data Raw: 0c 97 e6 15 3c 21 97 1f bf f7 ee da cb fa 9f 77 6f 70 86 20 26 b8 b3 c4 c2 1e 05 8d 13 7f 97 10 50 d5 b0 35 37 3a 3b ca 37 e0 79 7a dc 78 1f d2 8c 81 24 aa 2d 0b be bb 1b 72 b8 2c 9c da 76 6b 62 6f f7 45 58 20 6a 06 f0 63 96 73 16 6e 24 ad b9 bb 93 5c 14 f7 d4 a0 78 04 89 3b c7 79 a7 01 b3 4e c9 7d c4 1d fb 6b b6 56 69 49 dc dd d0 a2 55 b7 fe 38 41 78 5f 33 e8 c4 6b df d9 8a ff 54 f1 6d 10 60 34 91 95 6b 04 af 33 dc 19 7f f9 5f 01 48 1e 85 52 5e ce d0 33 16 e3 9c 7e b0 f0 d2 66 25 12 46 cf 11 a9 bd 4c c8 be 1f d4 36 4b ae 10 75 e5 d6 a9 df 54 5e 0f cc 4c 7f ed 36 ce b4 d9 f3 89 be d9 f7 57 21 19 10 6c ff c9 5c 5f cb 27 73 ab b8 29 33 bd 34 ed 30 b3 62 6e 48 80 f1 23 11 74 ba d1 28 be 1b 4e c4 16 e3 67 1e c9 59 9b 45 bf 78 a9 58 e4 1e 02 c6 45 74 ad 75 9a Data Ascii: <!wop &P57:;7yzx$-r,vkboEX jcsn$\x;yN}kViIU8Ax_3kTm`4k3_HR^3~f%FL6KuT^L6W!l\_'s)340bnH#t(NgYExXEtu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49722	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:21 UTC	634	OUT	GET /backend-templates/imgs/error-mouth.svg HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.auth0.com/backend-templates/main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:22 UTC	660	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1004 Connection: close Date: Wed, 20 Nov 2024 16:27:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 04 Apr 2017 20:35:27 GMT ETag: "8257bd740377ec86cea453d1dfda61fc" x-amz-version-id: AaHxHymY1KjIcyNmJFNopqVTjSWjAu_u Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 01ff2b265b9f2ac4574d3d644dd9dd26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 9tkvITXXcomXu4IXKu9TA95viyfK1naPv5Z6aCZ7OuMC8Zsb6cjMlw== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:22 UTC	1004	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 70 78 22 20 68 65 69 67 68 74 3d 22 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="19px" height="7px" viewBox="0 0 19 7" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49721	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M5KFDwsMOfAoykZ&MD=X2oUVrn8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 16:27:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d0f0a674-542b-4a6b-a151-55ff42a85843 MS-RequestId: 39624e4b-4066-4ddb-85d2-dff0f9487b51 MS-CV: NYPr2SW+VEa0nk+1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 16:27:22 GMT Connection: close Content-Length: 24490
2024-11-20 16:27:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 16:27:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:24 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:24 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162724Z-1777c6cb754dqf99hC1TEB5nps00000009s0000000005yv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:24 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 16:27:24 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 16:27:25 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 16:27:25 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 16:27:25 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49731	18.165.217.42	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:24 UTC	375	OUT	GET /backend-templates/imgs/error-mouth.svg HTTP/1.1 Host: cdn.auth0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:27:26 UTC	660	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1004 Connection: close Date: Wed, 20 Nov 2024 16:27:27 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 04 Apr 2017 20:35:27 GMT ETag: "8257bd740377ec86cea453d1dfda61fc" x-amz-version-id: AaHxHymY1KjIcyNmJFNopqVTjSWjAu_u Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 487e773bc809cb87809f770954ce1e22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 4mPIwQvlpzL06sDejRtOVzBuc_4BcQGkaEYCSWQE0pnbotx_OMgpeA== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains X-Robots-Tag: noindex
2024-11-20 16:27:26 UTC	1004	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 70 78 22 20 68 65 69 67 68 74 3d 22 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="19px" height="7px" viewBox="0 0 19 7" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49733	104.19.168.24	443	7132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:24 UTC	1373	OUT	GET /favicon.ico HTTP/1.1 Host: signin.techinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
2024-11-20 16:27:25 UTC	526	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Nov 2024 16:27:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close CF-Ray: 8e59ceaaae438cab-EWR CF-Cache-Status: EXPIRED Cache-Control: public, max-age=300 ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Auth0-L: 0.002 X-Auth0-Not-Found: 1 X-Auth0-RequestId: d4e36e3473ee2a0acbcb X-Content-Type-Options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-11-20 16:27:25 UTC	9	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:26 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:27 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:27 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162727Z-185f5d8b95cjbkr4hC1NYCeu240000000a9g00000000nu97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:27:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:26 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:27 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162727Z-185f5d8b95cdtclvhC1NYC4rmc0000000ap0000000009qva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162727Z-185f5d8b95cdh56ghC1NYCk1x400000004c0000000008qrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:27 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162727Z-1777c6cb754g9zd5hC1TEBfvpw00000009vg00000000wv14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:27 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:29 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:29 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162728Z-185f5d8b95cwtv72hC1NYC141w0000000adg00000000cavp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:29 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:29 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162729Z-1777c6cb754gvvgfhC1TEBz4rg00000009v000000000nvq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:29 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162729Z-1777c6cb754n67brhC1TEBcp9c0000000a00000000001dqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:29 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162729Z-r1d97b99577brct2hC1TEBambg00000002wg000000002eh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:29 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:29 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162729Z-185f5d8b95cmd8vfhC1NYC0g4000000006dg000000007ruz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:29 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:31 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162731Z-185f5d8b95cjbkr4hC1NYCeu240000000acg000000006rfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162731Z-185f5d8b95c4vwv8hC1NYCy4v40000000ar0000000000frv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:31 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162731Z-185f5d8b95crl6swhC1NYC3ueg0000000ap000000000bmqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:31 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162731Z-1777c6cb7544nvmshC1TEBf7qc00000009m000000000pfmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:31 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162732Z-r1d97b99577mrt4rhC1TEBftkc00000008zg00000000f0c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:33 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162733Z-r1d97b995774n5h6hC1TEBvf84000000092g00000000eptr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:33 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162734Z-r1d97b99577ndm4rhC1TEBf0ps000000099g000000004enw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:34 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162734Z-r1d97b99577mrt4rhC1TEBftkc00000008wg00000000qkt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162734Z-r1d97b99577dd2gchC1TEBz5ys00000008vg00000000pnuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:34 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162734Z-185f5d8b95c95vpshC1NYC759c0000000ahg000000008uyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:34 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:35 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162736Z-185f5d8b95c9mqtvhC1NYCghtc0000000agg00000000pysh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:36 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:36 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162736Z-185f5d8b95crwqd8hC1NYCps680000000aeg00000000mu62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:36 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162736Z-185f5d8b95cjbkr4hC1NYCeu240000000a7g00000000ynf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:36 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162736Z-r1d97b99577n5jhbhC1TEB74vn00000008yg00000000tthd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:36 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162736Z-185f5d8b95cp7lkfhC1NYC7rpw0000000ap0000000009wd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:38 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:38 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162738Z-1777c6cb754mqztshC1TEB4mkc00000009wg00000000dnkf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:38 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:38 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:39 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162739Z-1777c6cb7544nvmshC1TEBf7qc00000009p000000000d4pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:39 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:38 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162739Z-185f5d8b95c4hl5whC1NYCeex00000000aeg0000000076pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:38 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f65efca2-801e-0035-4104-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162739Z-r1d97b99577l6wbzhC1TEB3fwn000000097000000000cre8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:38 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162739Z-1777c6cb7544nvmshC1TEBf7qc00000009p000000000d4q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:41 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:41 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162741Z-r1d97b99577lxltfhC1TEByw2s000000092000000000qumn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162741Z-185f5d8b95cgrrn8hC1NYCgwh40000000adg000000002vf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162741Z-185f5d8b95c4vwv8hC1NYCy4v40000000an000000000ek43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162741Z-185f5d8b95cwtv72hC1NYC141w0000000ab000000000qm5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162741Z-1777c6cb754gvvgfhC1TEBz4rg00000009wg00000000f9ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:43 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:43 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162743Z-185f5d8b95cf7qddhC1NYC66an0000000agg00000000mfku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:43 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:43 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162743Z-r1d97b99577n4dznhC1TEBc1qw0000000960000000007ayq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:44 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:44 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162744Z-r1d97b99577xdmfxhC1TEBqbhg00000000rg00000000dth7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:44 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162744Z-1777c6cb754gvvgfhC1TEBz4rg00000009yg000000007xu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162744Z-1777c6cb754n67brhC1TEBcp9c00000009w000000000k75u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:45 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:46 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162746Z-185f5d8b95c95vpshC1NYC759c0000000abg00000000z3qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:46 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:45 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:46 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162746Z-185f5d8b95crl6swhC1NYC3ueg0000000apg000000007ss7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:46 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:46 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:46 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162746Z-185f5d8b95c95vpshC1NYC759c0000000ag000000000c97n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:46 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:46 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:46 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162746Z-1777c6cb754lvj6mhC1TEBke9400000009wg00000000gan9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:46 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:46 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:46 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162746Z-185f5d8b95cmd8vfhC1NYC0g40000000067g0000000110kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:46 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:48 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:48 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162748Z-185f5d8b95cgrrn8hC1NYCgwh40000000abg00000000du9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:48 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162748Z-1777c6cb7549j9hhhC1TEBzmcc00000009r000000000mtcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:48 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:48 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162748Z-185f5d8b95c4hl5whC1NYCeex00000000abg00000000qgn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:48 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:48 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 5cb5275b-201e-0033-36eb-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162748Z-r1d97b99577hsvhhhC1TEByb1w00000003bg00000000farc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:48 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162748Z-185f5d8b95csp6jmhC1NYCwy6s0000000aa0000000010dch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:50 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:50 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162750Z-r1d97b99577sdxndhC1TEBec5n00000009a0000000002reb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:50 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:50 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162750Z-1777c6cb754xrr98hC1TEB3kag00000009k000000000ub6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:50 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162751Z-185f5d8b95cwtv72hC1NYC141w0000000aag00000000tu0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:50 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162751Z-185f5d8b95crl6swhC1NYC3ueg0000000ar0000000000ngq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:51 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:50 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162751Z-185f5d8b95cgrrn8hC1NYCgwh40000000adg000000002w27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:52 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162753Z-1777c6cb754j47wfhC1TEB5wrw00000005p000000000hkcz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:52 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:53 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162753Z-1777c6cb754whff4hC1TEBcd6c00000008b000000000xpys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:53 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:53 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:53 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162753Z-185f5d8b95cdh56ghC1NYCk1x4000000046g00000000ypfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:53 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:53 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:53 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: df8c4adc-701e-0032-17f9-3aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162753Z-r1d97b995778dpcthC1TEB4b54000000093g000000000prw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:53 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:53 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0adba8b5-901e-007b-7a05-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162753Z-r1d97b99577ndm4rhC1TEBf0ps00000009800000000095am x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:55 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162755Z-185f5d8b95ckwnflhC1NYCx9qs0000000ah000000000km89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:55 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162755Z-185f5d8b95cjbkr4hC1NYCeu240000000a7000000000ywec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:55 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162755Z-185f5d8b95c96jn4hC1NYCbgp80000000afg00000000f4kz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:55 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:55 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162755Z-185f5d8b95c5lcmhhC1NYCsnsw0000000ag000000000tvz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:55 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:55 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:55 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162755Z-1777c6cb754ww792hC1TEBzqu400000009t0000000001ctb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:56 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:57 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 264b3f43-b01e-0002-5a1b-3b1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162757Z-r1d97b995778dpcthC1TEB4b54000000090g00000000au2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:57 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:57 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:57 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 8be6aac8-801e-008c-1a13-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162757Z-r1d97b99577xdmfxhC1TEBqbhg00000000r000000000fb2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:58 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:57 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162757Z-r1d97b9957744xz5hC1TEB5bf800000008vg00000000txff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:57 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162758Z-185f5d8b95c4vwv8hC1NYCy4v40000000ahg00000000su3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:57 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162758Z-1777c6cb754g9zd5hC1TEBfvpw00000009z000000000e4an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:27:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:59 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:27:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162759Z-r1d97b99577sdxndhC1TEBec5n000000097g00000000cdqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:59 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162801Z-1777c6cb754lv4cqhC1TEB13us00000009vg00000000av40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:27:59 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162800Z-185f5d8b95c4hl5whC1NYCeex00000000ab000000000rqzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:00 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:00 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162800Z-r1d97b99577ckpmjhC1TEBrzs0000000097g000000002pxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:00 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:00 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162800Z-185f5d8b95cjbkr4hC1NYCeu240000000aa000000000kda9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:02 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:02 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: fc5e1946-701e-003e-78eb-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162802Z-r1d97b99577hc74hhC1TEBvbns00000008xg00000000gznw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:02 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:02 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:02 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162802Z-185f5d8b95csp6jmhC1NYCwy6s0000000aag00000000xdzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:02 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:02 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:02 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:02 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162802Z-1777c6cb754wcxkwhC1TEB3c6w00000009sg00000000e7xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:02 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:02 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:02 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162802Z-185f5d8b95cdtclvhC1NYC4rmc0000000aqg0000000035k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:02 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49815	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:03 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M5KFDwsMOfAoykZ&MD=X2oUVrn8 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 16:28:04 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 74791264-aee1-41cd-ab18-ddd09c3176fe MS-RequestId: 4de337eb-34f4-4014-b428-a6d151b68f37 MS-CV: XveK3e8/uECgGdTM.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 16:28:03 GMT Connection: close Content-Length: 30005
2024-11-20 16:28:04 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 16:28:04 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:03 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:04 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162804Z-1777c6cb754g9zd5hC1TEBfvpw00000009z000000000e4qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:04 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:04 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:04 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:04 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f77b0594-001e-0014-3c66-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162804Z-185f5d8b95c4vwv8hC1NYCy4v40000000afg0000000119k6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:28:04 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:04 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:04 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162804Z-r1d97b99577n4dznhC1TEBc1qw000000095000000000ax4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:04 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:05 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162804Z-1777c6cb754rz2pghC1TEBghen00000009mg00000000w2nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:04 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:05 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:04 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162804Z-r1d97b99577d6qrbhC1TEBux5s000000099g000000004z58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:06 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162806Z-185f5d8b95csd4bwhC1NYCq7dc0000000abg00000000nqk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:06 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:07 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162807Z-185f5d8b95c96jn4hC1NYCbgp80000000agg00000000a5hr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:07 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:06 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162807Z-185f5d8b95c4hl5whC1NYCeex00000000ag00000000009y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:06 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162807Z-185f5d8b95c95vpshC1NYC759c0000000ag000000000cbbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:06 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162807Z-185f5d8b95cmd8vfhC1NYC0g4000000006c000000000f1vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:08 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:09 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:08 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 7865c287-e01e-003c-7664-3bc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162808Z-185f5d8b95cx9g8lhC1NYCtgvc00000002vg00000000cpe9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:28:09 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:09 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:09 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162809Z-1777c6cb754n67brhC1TEBcp9c00000009t000000000xyvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:09 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:09 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:09 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162809Z-185f5d8b95cwtv72hC1NYC141w0000000adg00000000ckw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:09 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:09 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:09 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162809Z-r1d97b99577mrt4rhC1TEBftkc00000008y000000000n1xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:09 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:09 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:09 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162809Z-185f5d8b95csp6jmhC1NYCwy6s0000000ad000000000kx61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:09 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:10 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:11 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162811Z-185f5d8b95ctl8xlhC1NYCn94g0000000amg000000008377 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:11 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:11 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:11 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:11 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: fce879e9-f01e-0052-0d66-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162811Z-185f5d8b95cwtv72hC1NYC141w0000000adg00000000cm01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:28:11 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:11 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162811Z-r1d97b99577ndm4rhC1TEBf0ps000000093g00000000qq76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162811Z-1777c6cb754ww792hC1TEBzqu400000009hg00000000y02z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:11 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:12 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162811Z-185f5d8b95crwqd8hC1NYCps680000000ae000000000n0k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:13 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162813Z-185f5d8b95ctl8xlhC1NYCn94g0000000amg0000000083ad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:13 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:13 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162813Z-185f5d8b95csp6jmhC1NYCwy6s0000000acg00000000n8qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:13 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162814Z-185f5d8b95c96jn4hC1NYCbgp80000000acg00000000xspm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:13 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:14 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162814Z-185f5d8b95csp6jmhC1NYCwy6s0000000aa0000000010f0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:14 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:13 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:14 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162814Z-1777c6cb754g9zd5hC1TEBfvpw00000009yg00000000hfvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:14 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:15 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162815Z-r1d97b99577xdmfxhC1TEBqbhg00000000ug000000004a4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162816Z-185f5d8b95ctl8xlhC1NYCn94g0000000ak000000000ek56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162816Z-1777c6cb754whff4hC1TEBcd6c00000008cg00000000t3yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162816Z-185f5d8b95csp6jmhC1NYCwy6s0000000ag0000000009gad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162816Z-1777c6cb754gc8g6hC1TEB966c00000009vg00000000as50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:17 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162817Z-185f5d8b95cx9g8lhC1NYCtgvc00000002q0000000015rka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:18 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: e339c898-001e-000b-315f-3b15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162818Z-185f5d8b95ckwnflhC1NYCx9qs0000000adg0000000106ex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:28:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162818Z-185f5d8b95c5lcmhhC1NYCsnsw0000000amg000000006a3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:18 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162818Z-1777c6cb754whff4hC1TEBcd6c00000008h00000000077xu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:18 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162818Z-185f5d8b95c4vwv8hC1NYCy4v40000000ah000000000v79p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:20 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162820Z-185f5d8b95c9mqtvhC1NYCghtc0000000am0000000009gx7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:20 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 106ccf4a-901e-00a0-17fa-3a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162820Z-r1d97b99577gg97qhC1TEBcrf400000008z0000000008x8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:20 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162820Z-185f5d8b95cgrrn8hC1NYCgwh40000000aag00000000hqgy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:20 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162820Z-185f5d8b95cf7qddhC1NYC66an0000000ang000000000gfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:21 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:21 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162821Z-r1d97b99577jlrkbhC1TEBq8d0000000090g00000000ahp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:21 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162822Z-1777c6cb754lv4cqhC1TEB13us00000009u000000000gqkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:22 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:22 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: d62c478f-901e-002a-4417-3b7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162822Z-r1d97b99577brct2hC1TEBambg00000002v00000000080g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:22 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:22 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:23 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ab7768f3-b01e-0098-59ec-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162823Z-185f5d8b95c95vpshC1NYC759c0000000ag000000000cd3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:23 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:22 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:23 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162823Z-1777c6cb754rz2pghC1TEBghen00000009v00000000014wm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:23 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:23 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:23 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162823Z-1777c6cb754lv4cqhC1TEB13us00000009x0000000004r47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:23 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:24 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:24 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162824Z-185f5d8b95ctl8xlhC1NYCn94g0000000ahg00000000h9gm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:24 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:24 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:25 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c70c13b9-401e-0064-2959-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162825Z-185f5d8b95c96jn4hC1NYCbgp80000000ahg00000000552t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:25 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:25 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:25 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162825Z-185f5d8b95c96jn4hC1NYCbgp80000000ag000000000erac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:25 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:25 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:25 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162825Z-185f5d8b95cp7lkfhC1NYC7rpw0000000ak000000000qtab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:25 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:25 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:25 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162825Z-185f5d8b95csd4bwhC1NYCq7dc0000000ac000000000n5ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:26 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:26 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:26 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162826Z-185f5d8b95cwtv72hC1NYC141w0000000aag00000000twuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:26 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:27 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:27 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:27 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 1f0666f4-801e-007b-6865-3be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162827Z-185f5d8b95ckwnflhC1NYCx9qs0000000ag000000000pcva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:28:27 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:27 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:27 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e2992adc-501e-005b-288c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162827Z-1777c6cb754mqztshC1TEB4mkc00000009wg00000000dsdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:27 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:28:27 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:28:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:28:27 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 947c99fd-001e-00a2-4d8c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T162827Z-r1d97b99577sdxndhC1TEBec5n00000009ag000000000u3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:28:28 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	11:27:01
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:27:05
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1968,i,15999626710381135891,11917695017271450622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:27:08
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://signin.techinsights.com/passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ	HTTP Parser: No favicon
Source: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ	HTTP Parser: No favicon
Source: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /passwordless/verify_redirect?scope=openid%20profile%20email&response_type=code&redirect_uri=https%3A%2F%2Fauth.svc.techinsights.com%2Fsaml%2FSSO&state=hKFo2SA0RndpWWpJODc5R3hsYzd1d3dObHJGQlB6dkpzWHBhb6FupWxvZ2luo3RpZNkgZ0ZvSUhKZURheUU3U0xPTXRDRjd5MXZ2YnA4V21URDWjY2lk2SA1S2JiRkRzcWlHMVM1RjdBdG1UUnVMWk10Z2JRMUNjdQ&protocol=samlp&samlrequest=nZLNctowFEZfRaO9fxOC0WBSF4aWKWkIdrrIpiMLGau1JUe6Iu3bV4CdoTMdFl1K%2Bq7O1bma3v9qG3Tg2gglUxz5IUZcMrUTcp%2Fi52LpJfh%2BNjW0beKOZBZqueWvlhtArlAacj5JsdWSKGqEIZK23BBgJM8e1iT2Q9JpBYqpBqPMGK7BoeZKGttynXN9EIw%2Fb9cprgE6Q4KAOopvDswHzmohjdjXYHym2uAIC%2FL8EaOF60BICqeuh0KXlEL%2Bu6wLRl%2FKcrkwr%2BJTlI%2BW4wzaYmvXLw%2BwL5%2BiObMYrRYp%2Fl5WZXXDJnc8KUsasrCKRneVWyQJncSUOj8rYyxfSQNUQorjML71osiLwyK6JTdjEkd%2BMhm%2FYLTpn%2F1RyLPOa47Kc8iQz0Wx8TaPeYHRt2EsLoD7IZATXV%2Fav34xHZTjmXNBLuWQo%2BmQgLBWHIe0mwaXjIGY2%2FIHZ%2FBfyP6Kry6zWsx2mv7kfi2a5gOA2GtlO0mPIxrAfW5Y9uT3%2F3c%2B3qhGsN8oaxr1NtecAk8xaMsxWirdUrje3HFH7LzqFCWgqZPBJeBgoP79zWd%2FAA%3D%3D&app=app-launcher&login_hint=drake.hill%40ttigroupna.com&_csrf=9DVgb45q-1Eg18tLKUDsTIBrl3t6y9HYuro4&_intstate=deprecated&verification_code=054019&connection=email&client_id=5KbbFDsqiG1S5F7AtmTRuLZMtgbQ1Ccu&email=drake.hill%40ttigroupna.com HTTP/1.1Host: signin.techinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/callback?state=EpmdgIjzuQqaXpNwBjHqqVI1l707bUPz HTTP/1.1Host: signin.techinsights.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
Source: global traffic	HTTP traffic detected: GET /authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJ HTTP/1.1Host: signin.techinsights.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /styleguide/latest/index.min.css HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.techinsights.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend-templates/main.css HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://signin.techinsights.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend-templates/main.js?v=1 HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signin.techinsights.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend-templates/main.js?v=1 HTTP/1.1Host: cdn.auth0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styleguide/latest/lib/font/avenir-next/avenir-next-regular.woff2 HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.techinsights.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.auth0.com/styleguide/latest/index.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styleguide/latest/lib/font/avenir-next/avenir-next-medium.woff2 HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.techinsights.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.auth0.com/styleguide/latest/index.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styleguide/latest/lib/font/avenir-next/avenir-next-regular-italic.woff2 HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signin.techinsights.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.auth0.com/styleguide/latest/index.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend-templates/imgs/error-mouth.svg HTTP/1.1Host: cdn.auth0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.auth0.com/backend-templates/main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M5KFDwsMOfAoykZ&MD=X2oUVrn8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /backend-templates/imgs/error-mouth.svg HTTP/1.1Host: cdn.auth0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: signin.techinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signin.techinsights.com/authorize/resume?state=r-fLZuTT-f4x2o1LPIUca9XnPcsL13eJAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk; did_compat=s%3Av0%3A20fe3508-5f55-4cad-b55a-8eea9d15ecc2.MqHsSz25klhjEMp1Xvdeh2QhV5cxHX06IWHqmZmo%2BZc; auth0_compat=s%3Av1.gadzZXNzaW9ugqZoYW5kbGXEQF2ZUFMLeoMjEuH9XZ5yOdKZKz5vnIKjx7Zu4uC9FsrTz2ALTMWUsNDqwYCs9BHi9wCU9BXHh-XVMhxE_oWZD3emY29va2llg6dleHBpcmVz1__MzTMAZ0ICX65vcmlnaW5hbE1heEFnZc4PcxQAqHNhbWVTaXRlpG5vbmU.M7olguVBYijo1ozUe8GQU6H2eLAn593l5rdJh0BdYEk
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M5KFDwsMOfAoykZ&MD=X2oUVrn8 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: signin.techinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.auth0.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.161.164
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage