Edit tour

Windows Analysis Report
https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body

Overview

General Information

Sample URL:	https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7
Analysis ID:	1560305
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5168 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1892,i,4899111604409082242,2871220154197983300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body	HTTP Parser: No favicon
Source: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49820 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.84.141
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET /?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/components/font-awesome/css/font-awesome.min.css HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&bodyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://klickskydd.skolverket.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://klickskydd.skolverket.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/base.css HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&bodyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/check.css HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&bodyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/popper.js@1.12.9/dist/umd/popper.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@4.6.2/dist/js/bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://klickskydd.skolverket.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://klickskydd.skolverket.org/vendor/components/font-awesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&bodyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bogGn1CdOPdgeMZ&MD=Hgaowp6M HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bogGn1CdOPdgeMZ&MD=Hgaowp6M HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: klickskydd.skolverket.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 21 Nov 2024 15:49:29 GMTContent-Type: text/htmlContent-Length: 1504Connection: closeETag: "64510b69-5e0"

Source: chromecache_71.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_71.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_72.2.dr, chromecache_77.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_82.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_82.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/popper.js
Source: chromecache_82.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.4.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Press
Source: chromecache_73.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_73.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49820 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/29@14/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1892,i,4899111604409082242,2871220154197983300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1892,i,4899111604409082242,2871220154197983300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://klickskydd.skolverket.org/vendor/components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0	0%	Avira URL Cloud	safe
https://klickskydd.skolverket.org/static/css/check.css	0%	Avira URL Cloud	safe
https://klickskydd.skolverket.org/favicon.ico	0%	Avira URL Cloud	safe
https://klickskydd.skolverket.org/vendor/components/font-awesome/css/font-awesome.min.css	0%	Avira URL Cloud	safe
https://klickskydd.skolverket.org/static/css/base.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
code.jquery.com	151.101.66.137	true	false	high
www.google.com	142.250.181.100	true	false	high
clickprotection.skolverket.se	193.235.52.43	true	false	unknown
klickskydd.skolverket.org	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://klickskydd.skolverket.org/vendor/components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0	false	Avira URL Cloud: safe	unknown
https://klickskydd.skolverket.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://klickskydd.skolverket.org/vendor/components/font-awesome/css/font-awesome.min.css	false	Avira URL Cloud: safe	unknown
https://klickskydd.skolverket.org/static/css/check.css	false	Avira URL Cloud: safe	unknown
https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body	false		unknown
https://klickskydd.skolverket.org/static/css/base.css	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.4.min.js	false		high
https://cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js	false		high
https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_71.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_83.2.dr, chromecache_75.2.dr	false	high
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_82.2.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_73.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_72.2.dr, chromecache_77.2.dr	false	high
https://getbootstrap.com/)	chromecache_73.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	false	high
https://cdn.jsdelivr.net/npm/popper.js	chromecache_82.2.dr	false	high
http://fontawesome.io/license	chromecache_71.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
193.235.52.43	clickprotection.skolverket.se	Sweden	203426	AS_SKOLVERKETSE	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560305
Start date and time:	2024-11-21 16:48:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/29@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.19.238, 64.233.165.84, 34.104.35.123, 104.18.187.31, 104.18.186.31, 178.79.238.0, 192.229.221.95, 172.217.17.35
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: https://klickskydd.skolverket.org Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://klickskydd.skolverket.org
URL: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&b Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&b Model: Joe Sandbox AI	{ "brands": [] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 14:49:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9782931201259912
Encrypted:	false
SSDEEP:	48:8mdvTHXbHvidAKZdA19ehwiZUklqehJy+3:8ODdCy
MD5:	D889956756E5BA3B7371F91F62C49E53
SHA1:	D32A9FEBA91A257B60E8D5EEAB6CAB5D691FA62F
SHA-256:	7EA3A607EBB89483B0151BBC3D1762B0B77404DBBE9C37798AAF427ACB3FF74B
SHA-512:	5F2D864880E86F36409A650519FCCACA613A229CF423F935806CBDC3996AF3C634DCF6F6D439E3B7540BADD6CC9EC3998FA9674CC7C8CB898E30A2984A1FE8C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....X..,<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 14:49:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9929515009871133
Encrypted:	false
SSDEEP:	48:8odvTHXbHvidAKZdA1weh/iZUkAQkqehyy+2:8MDX9Qjy
MD5:	D83556EC7049CD25C7477853B27755F4
SHA1:	5ABA7F09D83C63BE08FF9C7513B8E92543043039
SHA-256:	C46C8F51509B6B5893D333038B6B52BED3840EFA70A9B9C2F0928C9ECEFA3B3B
SHA-512:	3BA38D961B7374EE7D5290ED78734A890298DB8C6AEA73C59044FF1F26319BF8687C241DB4AB72C6966925384BADD6D785B4F23F7E480CD467CE6122BA793D3E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........,<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005477957487319
Encrypted:	false
SSDEEP:	48:8xYdvTHXsHvidAKZdA14tseh7sFiZUkmgqeh7sky+BX:8xcDGnmy
MD5:	591C848E4F934154390B3E241D216F4E
SHA1:	C755A5FC53CBBCD43B1D62FEA4793A0BFBB77691
SHA-256:	4D017292B1770659CFE5453BA44A86C780E31A2083796D367AFBFEBE99A09D00
SHA-512:	19BE1170A28F641218977BD69D780BC077D3ECE1DC22F37F44817F7091432DFD209D3458EA129A04064A14689F232F56A67DD1FFB9E1C65BFDF0DD7F1CA2FA3D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 14:49:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.993757305855669
Encrypted:	false
SSDEEP:	48:8EWdvTHXbHvidAKZdA1vehDiZUkwqeh+y+R:8EeDU8y
MD5:	85418FD5FD7F24C307AF9AB448A71E61
SHA1:	F730B34BDCF20142CFAD434F94B0A26912BFA119
SHA-256:	B314DF7B7718469AC5FE0AD5B83738005875738713B6F8992B2CB6B24A3BDADD
SHA-512:	FCF730BEA0AD5DC94F9857CAF9A21BBB248B4397B58B3C7E04A6D1D4953C1C81AE77A1A89F67AD7A26F1F2B46FBB05A1A2B65B864B72C03BEDEC01E8D004660F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....C...,<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 14:49:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981699066726058
Encrypted:	false
SSDEEP:	48:8PdvTHXbHvidAKZdA1hehBiZUk1W1qeh4y+C:8ND09Yy
MD5:	E268DF3D6D31436400058D909133E8D3
SHA1:	B2D6B40278F5E38327584935168052FF88032744
SHA-256:	134F4AFC9C1630701007C2F49B27C35BC2991B1B87A37DB8F770970888B05E0A
SHA-512:	ED612035112C5BBDCA81FEF9D773F686A3B584D9C36E6124B9ADB8AC4A0570C74D254A24461702169CBAAE46FACB0512C1F54E13C80D173575D14949B835F3CC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....a..,<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 21 14:49:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.991844773156808
Encrypted:	false
SSDEEP:	48:80UdvTHXbHvidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8nDaT/TbxWOvTbmy7T
MD5:	7C1B875C16A2A9A44F16822604A928E6
SHA1:	7A9D73C90F80394043813DC20FEA7DCFE72B7411
SHA-256:	69E875B4F54A7B17221846BACDE787FC019E5A38AA1ABE05266A80FBE7934E1A
SHA-512:	A9DCC899FAB43CDF8E5A68F26CA0A160C739D1007E239E373D7C7A169A03E6341B762DC52CB9C3495F18A68303C54A530652778A72698BDF17CBE22BEA627713
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........,<..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IuY(~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VuY(~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VuY(~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VuY(~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VuY~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qfn......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/vendor/components/font-awesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	162264
Entropy (8bit):	5.077412945081833
Encrypted:	false
SSDEEP:	1536:SS7CI4NT5+rMqFVD2DEBi8yNcuSElA3/uJpq3SYiLENM6HN26B:17sAGLq3SYiLENM6HN26B
MD5:	A4B3F509E79C54A512B890D73235EF04
SHA1:	1BE37B62306C8C0C6775BB4C93C5E4C4E13D9775
SHA-256:	F886516F3D41E9E7BD994C7F7A39A89CAFAE9483F90396CB0DDEAFE8D1EA5E72
SHA-512:	AEDFD2AD0E143486867C3C845D9B4D7325AF41E3AAD102F280796E1507128DA181D382315A16A5EF5B4ABB33FA2BC7985D807ABC9578A47917726146190D7FD3
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::be

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	4.883107424726411
Encrypted:	false
SSDEEP:	12:8lki7QskrC6krYEuld8XvHARHUsBZbvARMV4BsKZbvARESx+Zb9i96KZb1bWZL:8lVQs4EYEuf8/UVOQKOc6QK6l
MD5:	3957DCA88CDA54649B0E6A901144D04A
SHA1:	AC023D1FFADBE743B0BD7F139AC46C67F54AD5BB
SHA-256:	324F9E9A2C02239C657224E6FF9C4BA6BD2633A7E9D68A801FC475F803462E1B
SHA-512:	532BC7C356F89E8BF448027836E17C7266FB32763C3C7C8FD7575D797A19CF8D4EAC8EC1691F6A6D9DC2DD9CC16A0671D5CE6CD24B507A73A1C8ED5B240A0D13
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/static/css/base.css
Preview:	.alert {..margin-top: 1.5rem;.}...center {..padding-top: 1.5rem;..padding-bottom: 1.5rem;..margin: auto;.}...table-fixed {..table-layout: fixed;.}...pointer-item {..cursor: pointer;.}...table-fixed td {..text-overflow: ellipsis;..white-space: nowrap;..overflow: hidden;.}..@media (max-width: 767px) {...hidden-sm-down {...display: none;..}.}..@media (max-width: 991px) {...hidden-md-down {...display: none;..}.}..@media (max-width: 1199px) {...hidden-lg-down {...display: none;..}.}..@media (min-width: 992px) {...hidden-lg-up {...display: none;..}.}..@media (min-width: 1200px) {...hidden-xl-up {...display: none;..}.}.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62284)
Category:	downloaded
Size (bytes):	62563
Entropy (8bit):	5.1265521254086
Encrypted:	false
SSDEEP:	768:dGDfR+ohTVSwU7NUgu7MTCm0BKSHIBOiAAcFcQZI20xIl6jnV3jRvNXBc:dSfRFWw1JHumVZYxdVnXBc
MD5:	2A753DE0369D13BECC9649FC48F55535
SHA1:	E324063C8F46C6B29427DF1542F1026AD230F604
SHA-256:	423217ABF8775CEA2DC30FA1FE3E1C5E24DC359A80F1C37AD29A86094BFE81D1
SHA-512:	EEBBAC93C9063C5CA7656BB6E8E29B4DE23E40FA18721B71B263DE06A9072045C9C5EBA7E3227821261EEC2EACCFDC1DC5E1351A4DD5C6C21680265373EBD7DE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),Object.defineProperty(t,"prototype",{writable:!1}),t}function r(){return r=Object.assign?Object.assign.bind():function(t){for(var

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/vendor/components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89795
Entropy (8bit):	5.290870198529059
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH
MD5:	641DD14370106E992D352166F5A07E99
SHA1:	EDA46747C71D38A880BEE44F9A439C3858BB8F99
SHA-256:	A0FE8723DCF55DA64D06B25446D0A8513E52527C45AFCB37073465F9C6F352AF
SHA-512:	A6E981B23351186AA43F32879DD64C6801BE6E2AF7EF8B0E472CCCDEEBA52D5D7894DE4BCB292A364F1E11E525524077534338140A72687ADA4FAE62849843A5
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.4.min.js
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1504
Entropy (8bit):	4.127084456945634
Encrypted:	false
SSDEEP:	24:hY8CN8Sa8eF9wW4GYvMgVSz4n378RnRpA1tWx/ef0tJfV02nW9u:Ugp14jLEzm3fRKJW2W9u
MD5:	A91032709C06BD3B0E0538DA7445139D
SHA1:	8CCD6CD309E92EEB979F23F7083D335F59E7B3A3
SHA-256:	6E510C7FF57D63E7CEBEB284703A85116EE05E92C15921C563568A6F44C4C0C8
SHA-512:	A34460C28339757FF26440A26426C1C996C5B98141D38B38D504A98B24AFD6FAADABA51C572CEEE624B5E4C39AC39B5C82D58B09CC77A5DB994679228AF2891F
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>404 File not found!</title>. <style>. @import url("https://fonts.googleapis.com/css?family=Press+Start+2P");.. html,. body {. width: 100%;. height: 100%;. margin: 0;. }.. * {. font-family: 'Press Start 2P', cursive;. box-sizing: border-box;. }.. #app {. padding: 1rem;. background: black;. display: flex;. height: 100%;. justify-content: center;. align-items: center;. color: #54FE55;. text-shadow: 0px 0px 10px;. font-size: 6rem;. flex-direction: column;. }.. #app .txt {. font-size: 1.8rem;. }.. @keyframes blink {. 0% {. opacity: 0;. }.. 4

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89795
Entropy (8bit):	5.290870198529059
Encrypted:	false
SSDEEP:	1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH
MD5:	641DD14370106E992D352166F5A07E99
SHA1:	EDA46747C71D38A880BEE44F9A439C3858BB8F99
SHA-256:	A0FE8723DCF55DA64D06B25446D0A8513E52527C45AFCB37073465F9C6F352AF
SHA-512:	A6E981B23351186AA43F32879DD64C6801BE6E2AF7EF8B0E472CCCDEEBA52D5D7894DE4BCB292A364F1E11E525524077534338140A72687ADA4FAE62849843A5
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.970361760208333
Encrypted:	false
SSDEEP:	6:U7IRfe7IRbX2Xf8kHMpe9SnefSLdGgwiK3SH2YZHKskZLKYgl7R+Qz:UXUmXf88ydEuKCH2YZzkZ8nz
MD5:	58F8616EF1274CDC11AE4D7E2C56E5DF
SHA1:	B966804A5B5654D51AF4B4B3F600A3DD2CBBEFD8
SHA-256:	3EDE2AAAF2B540C291A593F3070E89101BA337478AE04DD38B15B1DD525DE239
SHA-512:	AE4E8D178CF59AAE6626D64FD326FFC769E894B627BFEDD9B9D65D488A374973BBEEA542DFD790DAF13B9B174C53CBE08E2C92F698B3117C0705872EF83AFF56
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/static/css/check.css
Preview:	body {..background-color: #d9534f;.}...alert {..background-color: #fff;..border: 1px solid rgba(0, 0, 0, .125);..color: #292b2c;.}...alert > strong, .alert .fa {..color: #d9534f;.}...fa-question-circle-o {..font-size: 1.5rem;.}...lead {..margin-top: 1rem;.}...dt-bold {..font-weight: bold;.}...dt-normal {..font-weight: normal;.}..dl:last-child, dd:last-child {..margin-bottom: 0;.}

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	5.418681673787624
Encrypted:	false
SSDEEP:	24:hYVDVuFD/ClpuHpu6eBl+1gCb6tfZ1Z1g2ld110M0vIa6G/dxkq8fS6K:EVyAuHQxzCetxWGz0f6G/dxQTK
MD5:	07E1EF2547A4D93116A2BF55AE6D4E80
SHA1:	DC57D64A8D5C10828958698B92CCFBBBC62DBEFA
SHA-256:	D332DDBBAE928D6634DB299647BCF2A4B3E9C763679376768913B60967F959FD
SHA-512:	DF42C080A3498CCC2FFB63C62441E9457267641F4AA6640E9BACA7335F6248714BFFD422B7AF6FF4330956F5C3C6BC6148EC4C0DFC492CC45C79F619389DDAEF
Malicious:	false
Reputation:	low
URL:	https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body
Preview:	<!DOCTYPE html>.<html>..<head>...<meta charset="utf-8">....<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">....<title>Default Name \|Warning</title>....<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css" integrity="sha384-xOolHFLEh07PJGoPkLv1IbcEPTNtaed2xpHsD9ESMhqIYd0nLMwNLD69Npy4HI+N" crossorigin="anonymous">....<link rel="stylesheet" href="vendor/components/font-awesome/css/font-awesome.min.css">....<link rel="stylesheet" href="static/css/base.css">..<link rel="stylesheet" href="static/css/check.css">...<script src="https://code.jquery.com/jquery-3.6.4.min.js" integrity="sha384-UG8ao2jwOWB7/oDdObZc6ItJmwUkR/PfMyt9Qs5AwX7PsnYn1CRKCTWyncPTWvaS" crossorigin="anonymous"></script>....<script src="https://cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>....<script src="https

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62284)
Category:	dropped
Size (bytes):	62563
Entropy (8bit):	5.1265521254086
Encrypted:	false
SSDEEP:	768:dGDfR+ohTVSwU7NUgu7MTCm0BKSHIBOiAAcFcQZI20xIl6jnV3jRvNXBc:dSfRFWw1JHumVZYxdVnXBc
MD5:	2A753DE0369D13BECC9649FC48F55535
SHA1:	E324063C8F46C6B29427DF1542F1026AD230F604
SHA-256:	423217ABF8775CEA2DC30FA1FE3E1C5E24DC359A80F1C37AD29A86094BFE81D1
SHA-512:	EEBBAC93C9063C5CA7656BB6E8E29B4DE23E40FA18721B71B263DE06A9072045C9C5EBA7E3227821261EEC2EACCFDC1DC5E1351A4DD5C6C21680265373EBD7DE
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),Object.defineProperty(t,"prototype",{writable:!1}),t}function r(){return r=Object.assign?Object.assign.bind():function(t){for(var

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 16:49:07.764244080 CET	49674	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:07.764250994 CET	49675	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:07.889226913 CET	49673	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:17.368855000 CET	49675	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:17.368856907 CET	49674	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:17.493949890 CET	49673	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:20.051295996 CET	443	49703	23.1.237.91	192.168.2.5
Nov 21, 2024 16:49:20.051470995 CET	49703	443	192.168.2.5	23.1.237.91
Nov 21, 2024 16:49:20.160425901 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.160481930 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:20.160689116 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.161061049 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.161097050 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:20.161150932 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.161376953 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.161400080 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:20.161669970 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:20.161686897 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.265136003 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:21.265187979 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:21.265271902 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:21.265464067 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:21.265485048 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:21.599587917 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:21.599644899 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:21.599750042 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:21.601919889 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:21.601948977 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:21.830516100 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.834952116 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.834984064 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.836647987 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.836720943 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.837897062 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.837990046 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.838114977 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.838124990 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.880402088 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.895212889 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.895512104 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.895543098 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.897005081 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.897064924 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.897583008 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.897664070 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.942075968 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:21.942087889 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:21.988912106 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.377042055 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.377073050 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.377121925 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.377152920 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.377168894 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.377218962 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.378530025 CET	49712	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.378546953 CET	443	49712	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.402672052 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.402724028 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.402786970 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.403409958 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.403450012 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.403501034 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.404606104 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.405405045 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.405420065 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.406930923 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.406949997 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.451324940 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.546078920 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:22.546125889 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:22.546200037 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:22.550400972 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:22.550421000 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:22.955656052 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955688953 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955698013 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955735922 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955763102 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955765963 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.955773115 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955840111 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:22.955887079 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.955887079 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.955887079 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:22.955919981 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.042678118 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.042754889 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.046897888 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.046911001 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.047358990 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.068331003 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:23.068789005 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:23.068849087 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:23.070564985 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:23.070647955 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:23.074891090 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:23.074989080 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:23.089277983 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.090908051 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.090989113 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.091008902 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.091015100 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.091082096 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.091082096 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.091399908 CET	49711	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.091439962 CET	443	49711	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.125418901 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:23.125439882 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:23.135339022 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.172853947 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:23.551867008 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.551948071 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.552120924 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.552165985 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.552181959 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.552181959 CET	49714	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.552192926 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.552201986 CET	443	49714	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.592845917 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.592894077 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.593034029 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.593489885 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:23.593502998 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:23.766351938 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:23.767136097 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:23.767169952 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:23.768815994 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:23.768883944 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:23.769952059 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:23.770042896 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:23.770231009 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:23.770242929 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:23.815356016 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:23.849986076 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.850285053 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.850347042 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.851547003 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.851896048 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.852046967 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:23.852060080 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.852083921 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:23.895832062 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.068988085 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.069278955 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.069334984 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.069710016 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.070123911 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.070205927 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.070269108 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.111327887 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.111387014 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.196609974 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.197386980 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.197516918 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.197530985 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.197559118 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.197604895 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.199004889 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.207354069 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.207411051 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.207438946 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.215636969 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.215706110 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.215729952 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.224088907 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.224155903 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.224174976 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.266552925 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.318449974 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.370198011 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.370239019 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.386871099 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.386955976 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.387027025 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.389266968 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.389343977 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.389370918 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.394190073 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.398008108 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.398025990 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.401645899 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.401705980 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.401720047 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.409035921 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.409478903 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.409493923 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.423716068 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.423767090 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.423783064 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.431004047 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.431078911 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.431154013 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.431170940 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.433806896 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.438497066 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.445907116 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.448784113 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.448812008 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.453381062 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.454025984 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.454050064 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.460612059 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.461925983 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.461951971 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.466825962 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.469180107 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.469196081 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.472914934 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.474318981 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.474333048 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.515367985 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.606805086 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606827021 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606842995 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606894970 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.606901884 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606924057 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606934071 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.606954098 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.606955051 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.606973886 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.607002020 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.610112906 CET	49716	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.610145092 CET	443	49716	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.616132021 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.616307974 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.616377115 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.617299080 CET	49715	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.617319107 CET	443	49715	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.628922939 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.628933907 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.628966093 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.628998041 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.629014015 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.629029036 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.629051924 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.643682957 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.643750906 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.643765926 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.643779039 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.643831015 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.644053936 CET	49720	443	192.168.2.5	151.101.66.137
Nov 21, 2024 16:49:24.644064903 CET	443	49720	151.101.66.137	192.168.2.5
Nov 21, 2024 16:49:24.786900043 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:24.786938906 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:24.787060976 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:24.787290096 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:24.787302971 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:24.798090935 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798118114 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:24.798228979 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798379898 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798420906 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:24.798475981 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798800945 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798813105 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:24.798939943 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:24.798959017 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:24.972518921 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.972554922 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:24.972651005 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.972892046 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:24.972904921 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:25.027337074 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.027477980 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.029069901 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.029098988 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.029489040 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.030617952 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.071351051 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.545922995 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.546020031 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.546114922 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.547189951 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.547189951 CET	49721	443	192.168.2.5	2.18.84.141
Nov 21, 2024 16:49:25.547235966 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:25.547262907 CET	443	49721	2.18.84.141	192.168.2.5
Nov 21, 2024 16:49:26.003617048 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.004070044 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.004106998 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.005987883 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.006067991 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.006406069 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.006490946 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.006527901 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.046441078 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.046461105 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.079864979 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.080182076 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.080244064 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.081501007 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.081576109 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.083661079 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.083740950 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.084094048 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.084111929 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.092024088 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.116676092 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.119872093 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.119896889 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.121402025 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.121470928 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.121799946 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.121903896 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.121913910 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.127974033 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.163337946 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.173893929 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.173907042 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.214234114 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.439656019 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.439989090 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.440025091 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.440062046 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.440073967 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.440118074 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.440144062 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.448430061 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.448508978 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.448520899 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.459717035 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.459779024 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.459789038 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.468154907 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.468203068 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.468211889 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.515634060 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515705109 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515732050 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515753984 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515774012 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515786886 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.515794992 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515841007 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.515865088 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.515865088 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.517689943 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.528371096 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.528422117 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.528434038 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.559283018 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.571605921 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.571954012 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.572266102 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.572310925 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.572319984 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.572351933 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.572365999 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.581716061 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.581748962 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.582894087 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.582982063 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.582989931 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.583018064 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.583071947 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.589077950 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.612817049 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.612844944 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.628084898 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.632451057 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.632508993 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.632528067 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.635889053 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.636101007 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.636238098 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.636256933 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.636281013 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.636332035 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.636343002 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.642518997 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:26.642769098 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:26.642792940 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:26.643127918 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:26.643440962 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:26.643505096 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:26.643565893 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:26.643946886 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.643963099 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.651906967 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.651977062 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.652004957 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.659997940 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.660079956 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.660103083 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.667900085 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.667973042 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.667984962 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.675822020 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.675899029 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.675910950 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.683829069 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.683881998 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.683893919 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.687374115 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:26.689727068 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.689745903 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.691787004 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.691906929 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.691961050 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.691977978 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.695827961 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.695884943 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.695899010 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.699811935 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.699861050 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.699872971 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.711329937 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.711419106 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.711430073 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.716665983 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.717123985 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.717191935 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.717205048 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.720277071 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.720344067 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.720360994 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.720406055 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.720736980 CET	49724	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.720757961 CET	443	49724	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.722923040 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.722991943 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.723006010 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.727255106 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.727333069 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.727344990 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.749763012 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.780205011 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.784624100 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.787565947 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.787656069 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.787673950 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.794167042 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.794266939 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.794277906 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.812531948 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.812563896 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.812655926 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.812663078 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.812725067 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.819475889 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.825119972 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.826368093 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.826414108 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.826448917 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.826457024 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.826554060 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.827202082 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.827259064 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.827284098 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.831990957 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.832056999 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.834696054 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.835926056 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.835943937 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.836009026 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.836720943 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.840792894 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.840846062 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.840852022 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.846915960 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.847023964 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.847031116 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.853085995 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.853163958 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.853171110 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.865415096 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.865494013 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.865502119 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.865508080 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.865677118 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.865679979 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865691900 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865766048 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865782022 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865786076 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865793943 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.865813017 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865824938 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.865828991 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.865840912 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.865856886 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.871607065 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.881032944 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.881063938 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.881074905 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.881093979 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.881100893 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.881143093 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.881165028 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.881203890 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.895469904 CET	49722	443	192.168.2.5	151.101.130.137
Nov 21, 2024 16:49:26.895489931 CET	443	49722	151.101.130.137	192.168.2.5
Nov 21, 2024 16:49:26.921888113 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.921905041 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.963080883 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.994143009 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.996187925 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:26.996248960 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:26.996267080 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.000637054 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.000691891 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:27.000698090 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.005019903 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.005091906 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:27.005098104 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.009494066 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.009547949 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:27.009555101 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.013803959 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.013865948 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:27.033020020 CET	49723	443	192.168.2.5	151.101.1.229
Nov 21, 2024 16:49:27.033044100 CET	443	49723	151.101.1.229	192.168.2.5
Nov 21, 2024 16:49:27.290324926 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.290349960 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.290425062 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.290537119 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.290538073 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.290561914 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.290616035 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.427706003 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.427730083 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.427800894 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.427817106 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.427856922 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.480413914 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.480437994 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.480504990 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.480536938 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.480583906 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.592628002 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.592648029 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.592761993 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.592786074 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.592835903 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.621407032 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.621510983 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.621542931 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.621637106 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.621638060 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.621638060 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.621860981 CET	49725	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.621877909 CET	443	49725	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.635804892 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.635848045 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:27.636049986 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.636354923 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:27.636374950 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:28.119745016 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:28.119786978 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:28.119852066 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:28.121068954 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:28.121087074 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:29.352541924 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.352940083 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.352952957 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.353641033 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.354304075 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.354392052 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.354738951 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.395365000 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.907495022 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.907552004 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.907617092 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.907633066 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.907735109 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.907782078 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.910023928 CET	49727	443	192.168.2.5	193.235.52.43
Nov 21, 2024 16:49:29.910037041 CET	443	49727	193.235.52.43	192.168.2.5
Nov 21, 2024 16:49:29.996629000 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:29.996702909 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:29.998900890 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:29.998908997 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:29.999300957 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:30.043796062 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:30.388063908 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:30.388150930 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:30.388247967 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:30.388689995 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:30.388727903 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:31.520731926 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:31.563370943 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140613079 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140678883 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140701056 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140741110 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140774012 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.140774012 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.140790939 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140800953 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.140825033 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.141191959 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.162722111 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.162832975 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:32.162981033 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.167742014 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:32.215224981 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.215321064 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.218472004 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.218504906 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.218857050 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.227739096 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.271342039 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.717814922 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.717876911 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.717919111 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.717973948 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.718046904 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.718090057 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.718113899 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.754650116 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:32.754733086 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:32.754872084 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:32.911864042 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.911916018 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.912072897 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.912072897 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.912137985 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.912257910 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.943227053 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.943269968 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.943331003 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.943373919 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:32.943416119 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:32.943439960 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.087187052 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.087235928 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.087382078 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.087382078 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.087450027 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.087536097 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.116508961 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.116559029 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.116605043 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.116672993 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.116714954 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.116739035 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.136931896 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.136975050 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.137017965 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.137085915 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.137124062 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.137149096 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.154470921 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.154515028 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.154546022 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.154561043 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.154589891 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.154608965 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.283442974 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.283492088 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.283543110 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.283617973 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.283658028 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.283682108 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.300163984 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.300208092 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.300247908 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.300262928 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.300299883 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.300299883 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.316637039 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.316695929 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.316716909 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.316739082 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.316766977 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.316786051 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.333090067 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.333131075 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.333183050 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.333204985 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.333235025 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.333355904 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.347547054 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.347621918 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.347628117 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.347665071 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.347692013 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.347713947 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.362708092 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.362783909 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.362838030 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.362864017 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.362890959 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.362910986 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.369864941 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.369945049 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.369963884 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.370018959 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.370024920 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.370245934 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.370245934 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.370285988 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.370317936 CET	49731	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.370333910 CET	443	49731	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.427988052 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.428042889 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.428107977 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.429394007 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.429438114 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.429542065 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.429781914 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.429804087 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.430666924 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.430690050 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.430810928 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.430815935 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.430833101 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.430962086 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.430972099 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.432647943 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.432735920 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.432827950 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.432950020 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.432976007 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.433082104 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.433089972 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.433135033 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.433250904 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:33.433255911 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:33.470432997 CET	49713	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:49:33.470495939 CET	443	49713	142.250.181.100	192.168.2.5
Nov 21, 2024 16:49:33.637526035 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:33.637556076 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:33.637572050 CET	49728	443	192.168.2.5	4.175.87.197
Nov 21, 2024 16:49:33.637577057 CET	443	49728	4.175.87.197	192.168.2.5
Nov 21, 2024 16:49:35.179336071 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.180339098 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.180351973 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.182491064 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.182496071 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.239077091 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.239595890 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.239664078 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.240042925 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.240058899 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.244220972 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.244482994 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.244504929 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.244952917 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.244956970 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.254707098 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.260183096 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.260198116 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.260607004 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.260612011 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.312822104 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.313422918 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.313431978 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.313913107 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.313916922 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.619179010 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.619235039 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.619355917 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.619371891 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.620954990 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.621098995 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.621104002 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.621119022 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.621479034 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.621558905 CET	443	49735	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.621619940 CET	49735	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.624742985 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.624804020 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.624919891 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.625085115 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.625094891 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.693909883 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.693979979 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.694061041 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.694078922 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.694123983 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.694360018 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.694365025 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.694380045 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.694734097 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.694814920 CET	443	49734	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.694861889 CET	49734	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.697737932 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.697793961 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.697889090 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.698052883 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.698076963 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.702306986 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.702364922 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.702414036 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.702723980 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.702748060 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.702761889 CET	49736	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.702769041 CET	443	49736	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.705985069 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.706034899 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.706110954 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.706243038 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.706257105 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.779534101 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.779619932 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.779684067 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.779926062 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.779947996 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.779961109 CET	49738	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.779968023 CET	443	49738	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.783647060 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.783710957 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.783788919 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.783926964 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.783938885 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.785748005 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.785778999 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.785840034 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.785900116 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.786052942 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.786053896 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.786101103 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.786276102 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.786309958 CET	443	49737	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.786351919 CET	49737	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.788333893 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.788386106 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:35.788485050 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.788631916 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:35.788660049 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.344568014 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.349636078 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.349705935 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.352467060 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.352480888 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.444593906 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.445347071 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.445404053 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.445825100 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.445837975 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.483917952 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.484462023 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.484530926 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.484942913 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.484981060 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.597388983 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.598022938 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.598098993 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.598494053 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.598507881 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.651185989 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.668349981 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.668386936 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.669007063 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.669018030 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.798079014 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.798233032 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.798342943 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.798465014 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.798532963 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.798571110 CET	49740	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.798588991 CET	443	49740	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.801883936 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.801971912 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.802066088 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.802234888 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.802249908 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.881414890 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.881498098 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.881633043 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.881794930 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.881818056 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.881850004 CET	49742	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.881856918 CET	443	49742	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.884526014 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.884594917 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.884712934 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.884845018 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.884871006 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.930031061 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.930145979 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.930252075 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.930424929 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.930473089 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.930504084 CET	49741	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.930517912 CET	443	49741	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.933823109 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.933864117 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:37.933962107 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.934168100 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:37.934179068 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.048573017 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.048662901 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.048811913 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.049166918 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.049186945 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.049216032 CET	49744	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.049223900 CET	443	49744	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.052607059 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.052681923 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.052781105 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.052964926 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.053006887 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.104186058 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.104386091 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.104471922 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.104662895 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.104686022 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.104715109 CET	49743	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.104727030 CET	443	49743	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.108141899 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.108202934 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:38.108303070 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.108572960 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:38.108592033 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.528860092 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.530047894 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.530069113 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.530679941 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.530685902 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.718514919 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.719131947 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.719150066 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.719760895 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.719767094 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.736778021 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.737298012 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.737361908 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.737792969 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.737807035 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.837783098 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.838572025 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.838598013 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.839206934 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.839212894 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.962465048 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.962631941 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.962702990 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.962795019 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.962815046 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.962827921 CET	49745	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.962835073 CET	443	49745	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.966557026 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.966620922 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.966717958 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.966912985 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.966943026 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.989584923 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.989995003 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.990070105 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:39.990541935 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:39.990556955 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.163820982 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.163980961 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.164058924 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.164207935 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.164230108 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.164243937 CET	49747	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.164251089 CET	443	49747	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.167690992 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.167782068 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.167877913 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.168057919 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.168078899 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.191869974 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.191951990 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.192068100 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.192173004 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.192219019 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.192250013 CET	49746	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.192265987 CET	443	49746	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.194900036 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.194966078 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.195053101 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.195189953 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.195226908 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.281620979 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.281776905 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.281866074 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.281955957 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.281955957 CET	49748	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.281994104 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.282021999 CET	443	49748	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.284889936 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.284919024 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.284998894 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.285151005 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.285165071 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.447630882 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.447803974 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.447886944 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.447988987 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.448033094 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.448064089 CET	49749	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.448081017 CET	443	49749	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.451329947 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.451414108 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:40.451522112 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.451682091 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:40.451705933 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.692226887 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.693814993 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.693880081 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.694531918 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.694545984 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.914518118 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.915307999 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.915389061 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.915663958 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.915678978 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.954924107 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.957863092 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.957922935 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:41.958336115 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:41.958350897 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.009881020 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.020917892 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.020999908 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.021377087 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.021390915 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.126948118 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.127104044 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.127182961 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.127402067 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.127440929 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.127469063 CET	49750	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.127484083 CET	443	49750	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.131226063 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.131289959 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.131391048 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.131577969 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.131603003 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.252640009 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.253215075 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.253246069 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.253664017 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.253674984 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.356755972 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.356920958 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.357026100 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.357136965 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.357136965 CET	49752	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.357186079 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.357213974 CET	443	49752	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.360910892 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.360940933 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.361015081 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.361186028 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.361201048 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.399808884 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.399899960 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.399986029 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.400147915 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.400191069 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.400233030 CET	49751	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.400249958 CET	443	49751	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.403497934 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.403563023 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.403661013 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.403778076 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.403801918 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.445307970 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.445458889 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.445539951 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.445616007 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.445626974 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.445636988 CET	49753	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.445641041 CET	443	49753	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.448435068 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.448445082 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.448549032 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.448704004 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.448715925 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.708801031 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.708981037 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.709080935 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.709233046 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.709233046 CET	49754	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.709269047 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.709294081 CET	443	49754	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.712552071 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.712649107 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:42.712768078 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.713089943 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:42.713119984 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:43.990164995 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:43.991045952 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:43.991079092 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:43.991568089 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:43.991575003 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.179250002 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.180025101 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.180051088 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.180675983 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.180730104 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.205701113 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.208295107 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.208323002 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.208956003 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.208966017 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.243453026 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.244066954 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.244076014 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.244512081 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.244518042 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.284092903 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.284842014 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.284904957 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.285054922 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.285069942 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.433197975 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.433360100 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.433583975 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.433619976 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.433638096 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.433655024 CET	49755	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.433661938 CET	443	49755	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.437108994 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.437155962 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.437246084 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.437417030 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.437434912 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.617413998 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.617593050 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.617924929 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.617924929 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.617924929 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.621428013 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.621474981 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.621577978 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.621808052 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.621824026 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.650099039 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.650270939 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.650537014 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.651079893 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.651079893 CET	49756	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.651097059 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.651106119 CET	443	49756	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.654321909 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.654361963 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.654453039 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.654618979 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.654638052 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.700754881 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.700825930 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.700984001 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.701287031 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.701292992 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.701304913 CET	49758	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.701308966 CET	443	49758	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.703758001 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.703780890 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.703866005 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.703967094 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.703978062 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.718532085 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.718620062 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.718684912 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.718847990 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.718848944 CET	49759	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.718883038 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.718905926 CET	443	49759	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.720856905 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.720958948 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.721066952 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.721146107 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.721179962 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:44.920875072 CET	49757	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:44.920912981 CET	443	49757	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.306251049 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.306811094 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.306885958 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.307240963 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.307256937 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.437139034 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.437581062 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.437611103 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.438290119 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.438301086 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.485244036 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.485747099 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.485770941 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.486119986 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.486126900 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.503647089 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.504051924 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.504065990 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.504406929 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.504410982 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.608639002 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.609191895 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.609268904 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.609438896 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.609455109 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.881017923 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.881107092 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.881536961 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.881536961 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.881536961 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.884644985 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.884692907 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.884785891 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.884960890 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.884978056 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.938574076 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.938714981 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.938918114 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.939117908 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.939117908 CET	49761	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.939141035 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.939153910 CET	443	49761	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.941874981 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.941951990 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.942054987 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.942292929 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.942329884 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.947530985 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.947608948 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.947741985 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.947774887 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.947788000 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.947804928 CET	49763	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.947810888 CET	443	49763	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.950050116 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.950079918 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.950160027 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.950301886 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.950311899 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.974530935 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.975588083 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.975683928 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.975892067 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.975910902 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.975930929 CET	49760	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.975938082 CET	443	49760	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.978589058 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.978666067 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:46.978770018 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.978996992 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:46.979044914 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.060935020 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.061084986 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.061417103 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.061417103 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.061417103 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.065339088 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.065421104 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.065516949 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.065706015 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.065737009 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.187030077 CET	49762	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.187052965 CET	443	49762	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:47.374821901 CET	49764	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:47.374857903 CET	443	49764	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.728846073 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.729518890 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.729578972 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.730025053 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.730041027 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.732481003 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.732784986 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.732798100 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.733124018 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.733129025 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.733936071 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.734785080 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.734793901 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.735191107 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.735194921 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.787934065 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.789077044 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.789123058 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.789689064 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.789697886 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.845608950 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.846219063 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.846297979 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:48.846657038 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:48.846671104 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.179800987 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.179882050 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.179949999 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.180198908 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.180217981 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.180231094 CET	49767	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.180238008 CET	443	49767	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.183805943 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.183861971 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.183964968 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.184214115 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.184236050 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.189744949 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.189820051 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.189882994 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.189970016 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.189981937 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.189994097 CET	49765	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.190000057 CET	443	49765	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.190452099 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.190597057 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.190666914 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.190735102 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.190736055 CET	49766	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.190798044 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.190845013 CET	443	49766	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.192456007 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.192492962 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.192600012 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.192713976 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.192723989 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.192831993 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.192864895 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.192934036 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.193099022 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.193113089 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.234004974 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.234162092 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.234272003 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.234272003 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.235991001 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.235994101 CET	49769	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.236018896 CET	443	49769	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.236022949 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.236116886 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.236202002 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.236211061 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.298027039 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.298188925 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.298275948 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.298320055 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.298320055 CET	49768	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.298341036 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.298355103 CET	443	49768	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.300266981 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.300285101 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:49.300354958 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.300465107 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:49.300472021 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.958918095 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.959512949 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.959532022 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.959970951 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.959975004 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.994904995 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.995429039 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.995469093 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.995600939 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.995805025 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.995812893 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.995908976 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.995943069 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:50.996392965 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:50.996398926 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.059755087 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.060175896 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.060236931 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.060549021 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.060561895 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.153258085 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.153748989 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.153774023 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.154239893 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.154243946 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.396575928 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.396735907 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.396855116 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.396913052 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.396930933 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.396941900 CET	49773	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.396946907 CET	443	49773	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.399753094 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.399772882 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.399856091 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.400013924 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.400022984 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.439439058 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.439516068 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.439583063 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.439702988 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.439726114 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.439740896 CET	49772	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.439748049 CET	443	49772	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.441782951 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.441828012 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.441906929 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.442042112 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.442055941 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.518541098 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.518630028 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.518687963 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.518851995 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.518868923 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.518882036 CET	49771	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.518887997 CET	443	49771	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.521636009 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.521744967 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.521836042 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.522005081 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.522037029 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.587049961 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.587112904 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.587176085 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.587322950 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.587336063 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.587352037 CET	49770	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.587357998 CET	443	49770	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.589452028 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.589468002 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.589543104 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.589673996 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.589684963 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.611377001 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.611466885 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.611545086 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.611639977 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.611661911 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.611675978 CET	49774	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.611682892 CET	443	49774	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.613584042 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.613598108 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:51.613676071 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.613814116 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:51.613835096 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.211224079 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.211852074 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.211879969 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.212346077 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.212349892 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.304481030 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.304982901 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.305017948 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.305449009 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.305455923 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.403295994 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.403908014 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.403927088 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.404380083 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.404386044 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.422544003 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.422940969 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.422971964 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.423301935 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.423309088 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.438795090 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.439127922 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.439137936 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.439472914 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.439479113 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.653897047 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.654066086 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.654151917 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.654295921 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.654314041 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.654339075 CET	49775	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.654345989 CET	443	49775	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.657743931 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.657768965 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.657875061 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.658082962 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.658097029 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.751028061 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.751097918 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.751174927 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.751389027 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.751409054 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.751420021 CET	49776	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.751426935 CET	443	49776	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.754410982 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.754456043 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.754555941 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.754745007 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.754759073 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.849263906 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.849350929 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.849441051 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.849582911 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.849605083 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.849628925 CET	49778	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.849638939 CET	443	49778	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.852471113 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.852511883 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.852601051 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.852823019 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.852834940 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.869875908 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.870033026 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.870206118 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.870206118 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.870206118 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.872061014 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.872078896 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.872168064 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.872292995 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.872301102 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.891608000 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.891668081 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.891822100 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.892043114 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.892103910 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.892142057 CET	49777	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.892158985 CET	443	49777	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.894608021 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.894643068 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:53.894737005 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.894906998 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:53.894928932 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:54.171022892 CET	49779	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:54.171061993 CET	443	49779	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.380589962 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.381345034 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.381376028 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.381990910 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.381997108 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.538153887 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.539108992 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.539150953 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.539758921 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.539766073 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.596544027 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.597445011 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.597456932 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.598081112 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.598087072 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.639251947 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.639940023 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.639969110 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.640480995 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.640489101 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.680310011 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.680814981 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.680833101 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.681443930 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.681463957 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.982114077 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.982194901 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.982274055 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.982497931 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.982520103 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.982547045 CET	49781	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.982553959 CET	443	49781	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.985986948 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.986079931 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.986198902 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.986342907 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.986366034 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.990205050 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.990278006 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.990354061 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.990523100 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.990523100 CET	49780	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.990540028 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.990551949 CET	443	49780	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.993153095 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.993191957 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:55.993267059 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.993402958 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:55.993416071 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.051168919 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.051368952 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.051532984 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.051557064 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.051568031 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.051587105 CET	49783	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.051592112 CET	443	49783	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.054155111 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.054198980 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.054291010 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.054421902 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.054450989 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.085565090 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.085645914 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.085755110 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.085840940 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.085861921 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.085874081 CET	49782	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.085881948 CET	443	49782	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.088565111 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.088597059 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.088669062 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.088922977 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.088932037 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.126813889 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.126893997 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.126949072 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.127129078 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.127142906 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.127145052 CET	49784	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.127150059 CET	443	49784	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.129647017 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.129674911 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:56.129739046 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.129859924 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:56.129877090 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.590536118 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.591187000 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.591243029 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.591702938 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.591716051 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.797666073 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.798257113 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.798299074 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.798726082 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.798733950 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.839694977 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.840378046 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.840415001 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.840877056 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.840888023 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.911537886 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.912288904 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.912322044 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.912710905 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.912727118 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.952265024 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.953053951 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.953088045 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:57.953656912 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:57.953663111 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.053402901 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.053488970 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.053683996 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.054044008 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.054069042 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.054112911 CET	49785	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.054121971 CET	443	49785	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.057645082 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.057712078 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.057835102 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.058058977 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.058079004 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.267755032 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.267916918 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.267995119 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.268276930 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.268302917 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.268346071 CET	49786	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.268353939 CET	443	49786	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.272491932 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.272542953 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.272624969 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.272840023 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.272862911 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.274344921 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.274519920 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.274590015 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.274656057 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.274672985 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.274687052 CET	49787	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.274693012 CET	443	49787	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.277456045 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.277488947 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.277633905 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.277873993 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.277887106 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.363620996 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.363723040 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.363801003 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.364177942 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.364198923 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.364213943 CET	49789	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.364223003 CET	443	49789	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.368071079 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.368125916 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.368227959 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.368400097 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.368428946 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.410161018 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.410254002 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.410351992 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.410577059 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.410593987 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.410609961 CET	49788	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.410614967 CET	443	49788	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.413896084 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.413928032 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:58.414088964 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.414397001 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:58.414407015 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:59.913901091 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:59.914561033 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:59.914580107 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:49:59.915230036 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:49:59.915235996 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.025686026 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.026240110 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.026284933 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.026871920 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.026889086 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.188114882 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.188756943 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.188771009 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.189336061 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.189341068 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.208921909 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.209321976 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.209419012 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.209995031 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.210011959 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.405694962 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.406346083 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.406362057 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.406956911 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.406961918 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.436609030 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.436717033 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.436790943 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.437002897 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.437002897 CET	49790	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.437021971 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.437032938 CET	443	49790	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.440526962 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.440634966 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.440728903 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.440884113 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.440917015 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.464919090 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.465091944 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.465178967 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.465286016 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.465286970 CET	49791	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.465318918 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.465343952 CET	443	49791	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.468003988 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.468044996 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.468146086 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.468265057 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.468278885 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.649983883 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.650134087 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.650199890 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.650425911 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.650438070 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.650449038 CET	49792	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.650454044 CET	443	49792	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.653789997 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.653831959 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.653904915 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.654119968 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.654136896 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.661016941 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.661101103 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.661176920 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.661350012 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.661350012 CET	49793	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.661370039 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.661381960 CET	443	49793	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.663919926 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.663952112 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.664038897 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.664203882 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.664211988 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.846183062 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.846343040 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.846489906 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.846514940 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.846529007 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.846539974 CET	49794	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.846544981 CET	443	49794	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.849633932 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.849667072 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:00.849756002 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.849930048 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:00.849942923 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.210942030 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.211549044 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.211571932 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.212176085 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.212182999 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.225873947 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.226227999 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.226305962 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.226789951 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.226807117 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.443754911 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.466993093 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.467011929 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.467633009 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.467638969 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.513178110 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.513700962 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.513719082 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.514286995 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.514293909 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.648394108 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.649032116 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.649111986 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.649179935 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.649199009 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.649214029 CET	49796	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.649221897 CET	443	49796	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.653107882 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.653214931 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.653389931 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.653454065 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.653470993 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.673187017 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.673243999 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.673306942 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.673403025 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.673429012 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.673444986 CET	49795	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.673451900 CET	443	49795	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.675399065 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.675489902 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.675600052 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.675693989 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.675718069 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.703097105 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.703546047 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.703560114 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.704144955 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.704152107 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.887590885 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.887744904 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.887995958 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.888211966 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.888212919 CET	49797	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.888245106 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.888268948 CET	443	49797	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.891824007 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.891872883 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.891971111 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.892155886 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.892187119 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.971889973 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.971961021 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.972040892 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.972305059 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.972325087 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.972337008 CET	49798	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.972343922 CET	443	49798	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.975874901 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.975966930 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:02.976105928 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.976304054 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:02.976340055 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.155675888 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.155786037 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.155862093 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.184098959 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.184132099 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.184160948 CET	49799	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.184175968 CET	443	49799	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.190306902 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.190372944 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:03.190457106 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.190659046 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:03.190676928 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.389334917 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.390140057 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.390199900 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.390754938 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.390769005 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.438520908 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.439122915 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.439156055 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.439620018 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.439630032 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.618805885 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.619472027 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.619550943 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.620049953 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.620065928 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.691464901 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.692188025 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.692219019 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.692754030 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.692759991 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.825972080 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.826052904 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.826256990 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.826409101 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.826409101 CET	49801	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.826447010 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.826469898 CET	443	49801	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.829570055 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.829615116 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.829935074 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.831222057 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.831242085 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.882757902 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.882826090 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.882925034 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.883135080 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.883182049 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.883213043 CET	49800	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.883229017 CET	443	49800	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.886460066 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.886504889 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.886595011 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.886744976 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.886758089 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.988039017 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.988898039 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.988934994 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:04.989383936 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:04.989392042 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.058984995 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.059149027 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.059259892 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.059581995 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.059607029 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.059632063 CET	49802	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.059643984 CET	443	49802	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.062446117 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.062468052 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.062534094 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.062666893 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.062681913 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.129924059 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.130017042 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.130081892 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.130259991 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.130259991 CET	49803	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.130280972 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.130302906 CET	443	49803	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.133625984 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.133671045 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.133754015 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.133899927 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.133914948 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.432562113 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.432719946 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.432825089 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.432979107 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.433005095 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.433017969 CET	49804	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.433026075 CET	443	49804	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.436045885 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.436140060 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:05.436239958 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.436398029 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:05.436443090 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.561723948 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.562277079 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.562314034 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.562781096 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.562788963 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.602243900 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.602765083 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.602797031 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.603245020 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.603250027 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.848407984 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.849035978 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.849075079 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.849538088 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.849544048 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.922049999 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.922518969 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.922615051 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.922928095 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.922943115 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.998836040 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.998904943 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.999123096 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.999382973 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.999402046 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:06.999418020 CET	49805	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:06.999424934 CET	443	49805	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.002460957 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.002535105 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.002635956 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.002789974 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.002820969 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.051198959 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.051263094 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.051326036 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.051476002 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.051493883 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.051507950 CET	49806	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.051513910 CET	443	49806	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.053844929 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.053945065 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.054038048 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.054174900 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.054210901 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.156188965 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.156807899 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.156850100 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.157272100 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.157284021 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.291012049 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.291162014 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.291245937 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.291521072 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.291521072 CET	49807	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.291542053 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.291554928 CET	443	49807	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.294199944 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.294226885 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.294302940 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.294452906 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.294470072 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.365537882 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.365633965 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.365706921 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.365928888 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.365928888 CET	49808	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.365967035 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.365993023 CET	443	49808	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.368932962 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.368973970 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.369060993 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.369225979 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.369235992 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.590396881 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.590483904 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.590632915 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.591056108 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.591089964 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.591125965 CET	49809	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.591139078 CET	443	49809	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.594264984 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.594284058 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:07.594355106 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.594501972 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:07.594517946 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.738419056 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.738986969 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:08.739068031 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.739512920 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:08.739527941 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.852565050 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.853251934 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:08.853333950 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:08.853678942 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:08.853694916 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.160682917 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.161329031 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.161370993 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.161983967 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.161992073 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.162842035 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.163327932 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.163350105 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.163819075 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.163824081 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.177189112 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.177215099 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.177282095 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.177299976 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.177371025 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.177546978 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.177591085 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.177622080 CET	49810	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.177638054 CET	443	49810	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.180830956 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.180870056 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.180953979 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.181092978 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.181103945 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.296453953 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.296520948 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.296674967 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.297255039 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.297298908 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.297333002 CET	49811	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.297349930 CET	443	49811	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.300966978 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.301049948 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.301131010 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.301295996 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.301331997 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.391381025 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.391880989 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.391902924 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.392508030 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.392513990 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.608994007 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609019995 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609147072 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.609186888 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609643936 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.609663963 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609678030 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.609803915 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609832048 CET	443	49813	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.609873056 CET	49813	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.612739086 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.612777948 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.612852097 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.612986088 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.612998962 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.615340948 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.615490913 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.615546942 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.615577936 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.615587950 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.615597963 CET	49812	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.615602970 CET	443	49812	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.617667913 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.617732048 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.617806911 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.617922068 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.617950916 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840136051 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840162992 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840239048 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.840261936 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840307951 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.840575933 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.840579987 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840601921 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.840790033 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840826988 CET	443	49814	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.840869904 CET	49814	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.843986988 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.844027996 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:09.844125032 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.844353914 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:09.844372034 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.068608999 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:10.068660021 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:10.068805933 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:10.069284916 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:10.069319010 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:10.833242893 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.833961964 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:10.834013939 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.834507942 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:10.834537983 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.961571932 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.962198019 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:10.962217093 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:10.962752104 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:10.962759972 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.268240929 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.271373987 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.271570921 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.271570921 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.271806002 CET	49816	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.271837950 CET	443	49816	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.275023937 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.275070906 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.275161982 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.275398016 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.275414944 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.429768085 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.429795980 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.429893970 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.429907084 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.430295944 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.430304050 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.430315971 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.430485964 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.430516958 CET	443	49815	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.430558920 CET	49815	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.434027910 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.434104919 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.434235096 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.434585094 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.434622049 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.460676908 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.461317062 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.461340904 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.461946011 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.461951017 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.483350039 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.484178066 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.484203100 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.484788895 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.484801054 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.693646908 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.694277048 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.694300890 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.694910049 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.694916010 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.718288898 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:11.718447924 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:11.723726988 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:11.723754883 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:11.724196911 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:11.738323927 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:11.779345989 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:11.913975000 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.917002916 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.917082071 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.917130947 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.917154074 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.917169094 CET	49817	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.917176962 CET	443	49817	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.920785904 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.920824051 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.920906067 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.921120882 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.921138048 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.935731888 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.938724041 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.939013958 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.939066887 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.939066887 CET	49818	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.939111948 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.939133883 CET	443	49818	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.941886902 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.941929102 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:11.942025900 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.942219973 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:11.942245960 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.156461954 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.159518957 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.159600019 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.159647942 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.159670115 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.159683943 CET	49819	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.159692049 CET	443	49819	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.163525105 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.163583040 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.163710117 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.163897038 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:12.163927078 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:12.379484892 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.379543066 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.379585028 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.379621983 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.379668951 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.379719973 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.379719973 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.415849924 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.415919065 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.415936947 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.415956020 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.415991068 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.415996075 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.416054010 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.416094065 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.416095018 CET	49820	443	192.168.2.5	20.109.210.53
Nov 21, 2024 16:50:12.416119099 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:12.416143894 CET	443	49820	20.109.210.53	192.168.2.5
Nov 21, 2024 16:50:13.128832102 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.132162094 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.132184029 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.132756948 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.132764101 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.238990068 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.239415884 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.239459038 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.239842892 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.239856005 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.596718073 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.599543095 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.599603891 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.599675894 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.599699974 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.599729061 CET	49821	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.599736929 CET	443	49821	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.602448940 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.602530003 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.602615118 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.602787971 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.602819920 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.681292057 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.681732893 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.681766033 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.682188034 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.682199955 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.682743073 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.685735941 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.685802937 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.685906887 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.685908079 CET	49822	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.685951948 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.685978889 CET	443	49822	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.687869072 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.687956095 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.688049078 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.688188076 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.688226938 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.705105066 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.705403090 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.705413103 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.705763102 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.705768108 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.951632977 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.952172995 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.952202082 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:13.952661991 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:13.952668905 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.147587061 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.148582935 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.148757935 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.148829937 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.148899078 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.148930073 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.148948908 CET	49823	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.148955107 CET	443	49823	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.150556087 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.150639057 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.151071072 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.151103020 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.151130915 CET	49824	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.151146889 CET	443	49824	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.152659893 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.152689934 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.152770042 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.153836012 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.153882027 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.153939962 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.154021025 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.154035091 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.154120922 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.154138088 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.409457922 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.409514904 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.409672976 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.410016060 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.410043001 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.410105944 CET	49825	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.410136938 CET	443	49825	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.413031101 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.413048983 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:14.413146973 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.413362026 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:14.413373947 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.487971067 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.488569021 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.488612890 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.489042044 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.489049911 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.497982979 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.498379946 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.498440027 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.503088951 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.503108025 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.943491936 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.944238901 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.944269896 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.945105076 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.945112944 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.952531099 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.955725908 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.955857992 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.958339930 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.958339930 CET	49826	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.958400011 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.958435059 CET	443	49826	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.959789038 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.959845066 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:15.959919930 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.960124969 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:15.960140944 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.009313107 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.009845018 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.009876013 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.010615110 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.010622025 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.158807039 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.158838034 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.158902884 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.158935070 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.158994913 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.159290075 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.159307957 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.159336090 CET	49827	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.159343004 CET	443	49827	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.162882090 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.162960052 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.163093090 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.163307905 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.163357973 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.197201967 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.198612928 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.198641062 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.199268103 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.199275017 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.391808987 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.394704103 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.394795895 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.394844055 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.394861937 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.394877911 CET	49828	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.394885063 CET	443	49828	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.398296118 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.398329973 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.398400068 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.398619890 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.398633003 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.474672079 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.476871967 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.476937056 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.476939917 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.477021933 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.477088928 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.477106094 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.477119923 CET	49829	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.477127075 CET	443	49829	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.480449915 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.480544090 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.480659008 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.480859995 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.480896950 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.642615080 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.645632982 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.645730019 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.645760059 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.645773888 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.645787001 CET	49830	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.645792961 CET	443	49830	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.649260044 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.649302959 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:16.649378061 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.649571896 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:16.649580956 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.738475084 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.738972902 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:17.739005089 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.739645004 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:17.739651918 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.879776001 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.880373001 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:17.880404949 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:17.881043911 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:17.881057024 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.182148933 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.185132980 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.185236931 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.185311079 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.185338974 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.185353994 CET	49831	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.185362101 CET	443	49831	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.188826084 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.188877106 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.188967943 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.189116955 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.189142942 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.195097923 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.195568085 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.195594072 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.196182966 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.196187019 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.315792084 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.319399118 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.319478035 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.319540024 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.319540024 CET	49832	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.319575071 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.319598913 CET	443	49832	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.323285103 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.323333979 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.323419094 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.323616028 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.323633909 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.360096931 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.360642910 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.360694885 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.361332893 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.361345053 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.434616089 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.435112953 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.435125113 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.435576916 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.435580969 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.642947912 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.645941973 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.645998001 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.646012068 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.646076918 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.646127939 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.646172047 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.646188974 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.646197081 CET	49833	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.646203041 CET	443	49833	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.649873018 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.649919033 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.649991989 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.650186062 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.650203943 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.813993931 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.814138889 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.814337969 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.814383984 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.814383984 CET	49834	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.814412117 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.814440966 CET	443	49834	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.817898035 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.817930937 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.818011999 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.818219900 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.818233967 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.877914906 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.878619909 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.878771067 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.878771067 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.878784895 CET	49835	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.878794909 CET	443	49835	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.881273031 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.881319046 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:18.881400108 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.881525993 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:18.881542921 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:19.925534964 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:19.926189899 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:19.926203012 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:19.926810980 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:19.926815987 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.112225056 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.113039970 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.113061905 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.113759041 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.113765955 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.358730078 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.362093925 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.362198114 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.362238884 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.362257957 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.362298965 CET	49837	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.362304926 CET	443	49837	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.366234064 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.366269112 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.366363049 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.366676092 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.366688967 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.523753881 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.524430037 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.524457932 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.525074005 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.525079012 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.571217060 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.571257114 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.571310043 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.571376085 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.571429968 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.571752071 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.571768999 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.571784019 CET	49838	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.571790934 CET	443	49838	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.575742960 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.575809002 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.575936079 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.576170921 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.576220989 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.608794928 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.609561920 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.609612942 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.610168934 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.610174894 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.669106960 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.670072079 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.670134068 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.670562029 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.670577049 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.979752064 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.979840040 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.979899883 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.980315924 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.980315924 CET	49839	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.980340004 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.980354071 CET	443	49839	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.983985901 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.984014988 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:20.984102011 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.984302044 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:20.984318972 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.055814981 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.055896997 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.055983067 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.055993080 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.056051970 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.056345940 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.056369066 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.056389093 CET	49840	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.056396008 CET	443	49840	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.060134888 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.060177088 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.060272932 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.060488939 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.060508013 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.119869947 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.122922897 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.123023033 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.123100996 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.123100996 CET	49841	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.123143911 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.123172045 CET	443	49841	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.126864910 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.126902103 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.126993895 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.127182007 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:21.127197981 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:21.188967943 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:21.189053059 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:21.189147949 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:21.189454079 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:21.189491987 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:22.085611105 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.086261988 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.086282015 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.086882114 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.086886883 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.639889956 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.640037060 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.640104055 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.640326023 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.640341043 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.640355110 CET	49842	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.640362024 CET	443	49842	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.643659115 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.643740892 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.643845081 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.644012928 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.644037962 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.828152895 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.828635931 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.828712940 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:22.829066992 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:22.829085112 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.129276991 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.129924059 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.129970074 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.130373955 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.130383968 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.143471003 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.143831015 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.143878937 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.144140959 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.144148111 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.257344007 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.257769108 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.257791042 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.258127928 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.258137941 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.281128883 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.284641027 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.284728050 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.284815073 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.284857035 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.284888029 CET	49843	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.284904003 CET	443	49843	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.287794113 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.287878990 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.287966967 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.288284063 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.288321972 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.574026108 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.576845884 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.576958895 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.577050924 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.577107906 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.577107906 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.577131987 CET	49844	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.577152967 CET	443	49844	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.578303099 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.580210924 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.580300093 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.580406904 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.580616951 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.580651045 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.581274033 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.581345081 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.581396103 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.581417084 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.581429958 CET	49845	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.581437111 CET	443	49845	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.584229946 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.584264994 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.584362030 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.584553003 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.584580898 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.692939043 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.696141958 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.696214914 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.696280003 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.696290970 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.696304083 CET	49846	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.696310997 CET	443	49846	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.698575020 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.698622942 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.698693991 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.698859930 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:23.698883057 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:23.775480032 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:23.775896072 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:23.775922060 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:23.776424885 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:23.776859999 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:23.776954889 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:23.827795982 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:24.453401089 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:24.454094887 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:24.454154968 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:24.455173969 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:24.455188036 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.113746881 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.113910913 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.114130974 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.114209890 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.114244938 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.114272118 CET	49848	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.114288092 CET	443	49848	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.118000031 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.118025064 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.118122101 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.118331909 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.118344069 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.278090954 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.278989077 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.279051065 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.279500008 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.279516935 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.647000074 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.647819996 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.647847891 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.648356915 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.648363113 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.650707960 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.651037931 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.651067019 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.651515961 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.651530027 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.838792086 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.841902971 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.841952085 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.842071056 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.842071056 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.842098951 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.842098951 CET	49849	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.842107058 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.842117071 CET	443	49849	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.846894026 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.846930981 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.847024918 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.847228050 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.847234964 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.975836039 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.976591110 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.976608038 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:25.976969004 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:25.976973057 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.090089083 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.093235016 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.093420982 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.093436003 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.093436003 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.093436003 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096628904 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.096757889 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096776009 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096798897 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.096832037 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096832037 CET	49850	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096858978 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.096877098 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.096882105 CET	443	49850	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.097064972 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.097079992 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.099370003 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.099376917 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.099463940 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.099638939 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.099649906 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.405649900 CET	49851	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.405674934 CET	443	49851	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.432424068 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.435514927 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.435683012 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.435683012 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.435683966 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.438581944 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.438611984 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.438674927 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.438821077 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.438832998 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:26.749419928 CET	49852	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:26.749442101 CET	443	49852	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.094681025 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.095866919 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.095895052 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.096363068 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.096368074 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.542545080 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.547137976 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.547197104 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.547215939 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.547250032 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.547293901 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.547316074 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.547323942 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.547342062 CET	49853	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.547347069 CET	443	49853	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.550457001 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.550470114 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.550535917 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.550731897 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.550744057 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.962980032 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.963807106 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.963829041 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:27.964288950 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:27.964293957 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.009578943 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.010127068 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.010154963 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.010530949 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.010538101 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.361560106 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.362158060 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.362185001 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.362667084 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.362672091 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.423461914 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.423616886 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.423794031 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.423830032 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.423830032 CET	49856	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.423849106 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.423861980 CET	443	49856	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.426794052 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.426822901 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.426891088 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.427050114 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.427056074 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.472846985 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.476049900 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.476118088 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.476172924 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.476180077 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.476192951 CET	49855	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.476198912 CET	443	49855	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.478360891 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.478405952 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.478627920 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.478627920 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.478692055 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.862373114 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.862452984 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.862581968 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.862612963 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.862636089 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.862824917 CET	49857	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.862838984 CET	443	49857	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.866024971 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.866058111 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:28.866152048 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.866326094 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:28.866338015 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.007833958 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.008610964 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.008625984 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.009005070 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.009008884 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.392817974 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.393316031 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.393338919 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.393796921 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.393804073 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.456764936 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.456898928 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.456954002 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.457068920 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.457082033 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.457091093 CET	49854	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.457096100 CET	443	49854	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.459942102 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.459984064 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.460069895 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.460225105 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.460246086 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.840600967 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.843660116 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.843866110 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.843866110 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.843866110 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.846831083 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.846900940 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:29.846992016 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.847153902 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:29.847177029 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.155525923 CET	49858	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.155555964 CET	443	49858	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.300692081 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.301166058 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.301197052 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.301781893 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.301789045 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.367014885 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.367697954 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.367779970 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.368170023 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.368185997 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.643579006 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.644354105 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.644412041 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.645189047 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.645203114 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754074097 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754146099 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754209995 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.754247904 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754266977 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754311085 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.754498959 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.754517078 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.754524946 CET	49859	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.754530907 CET	443	49859	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.758049011 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.758133888 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.758222103 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.758373976 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.758414984 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.819802046 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.820111036 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.820215940 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.820297003 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.820297003 CET	49860	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.820339918 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.820367098 CET	443	49860	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.823010921 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.823060989 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:30.823273897 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.823416948 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:30.823430061 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.095768929 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.095839977 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.095966101 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.096060991 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.096061945 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.096343040 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.096386909 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.096419096 CET	49861	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.096435070 CET	443	49861	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.099905014 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.099946022 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.100045919 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.100297928 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.100318909 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.145257950 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.146013021 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.146075010 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.146610975 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.146625996 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.713174105 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.715261936 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.715281010 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.716000080 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.716006994 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.735534906 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.735639095 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.735966921 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.736068010 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.736068010 CET	49862	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.736112118 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.736139059 CET	443	49862	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.739181995 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.739229918 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:31.739361048 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.739497900 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:31.739511967 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.152545929 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.155580997 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.155658007 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.155679941 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.155700922 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.155776978 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.155832052 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.155843973 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.155858040 CET	49863	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.155864000 CET	443	49863	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.159125090 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.159229994 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.159353018 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.159528971 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.159560919 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.704412937 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.705073118 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.705152035 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.705507040 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.705522060 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.707901001 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.708199978 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.708220005 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:32.708524942 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:32.708533049 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.014154911 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.014688969 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.014750004 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.015141964 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.015156031 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.149497986 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.152924061 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.153063059 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.153151989 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.153194904 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.153225899 CET	49864	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.153240919 CET	443	49864	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.156510115 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.156557083 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.156644106 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.156826019 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.156841993 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.156989098 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.159796953 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.159868956 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.159884930 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.159934998 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.159986973 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.160023928 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.160046101 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.160058975 CET	49865	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.160064936 CET	443	49865	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.162259102 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.162345886 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.162439108 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.162592888 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.162627935 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.460602999 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.460850000 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:33.460978985 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:33.461240053 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:33.463249922 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.463361025 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.463443041 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.463443041 CET	49866	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.463485003 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.463514090 CET	443	49866	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.466497898 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.466526031 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.466612101 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.466852903 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.466865063 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.472755909 CET	49847	443	192.168.2.5	142.250.181.100
Nov 21, 2024 16:50:33.472821951 CET	443	49847	142.250.181.100	192.168.2.5
Nov 21, 2024 16:50:33.553757906 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.554141045 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.554162025 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.554591894 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.554598093 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.934458017 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.935282946 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.935386896 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.935877085 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.935965061 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.997772932 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.997840881 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.997888088 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.998115063 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.998137951 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:33.998179913 CET	49867	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:33.998187065 CET	443	49867	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.001751900 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.001776934 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.001853943 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.002084017 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.002098083 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.369437933 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.372133970 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.372210979 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.372644901 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.372644901 CET	49868	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.372714043 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.372751951 CET	443	49868	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.385288000 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.385406017 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:34.385489941 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.393551111 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:34.393665075 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.036849022 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.037398100 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.037414074 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.038038969 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.038045883 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.041821957 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.042085886 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.042151928 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.042391062 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.042407990 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.345596075 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.346440077 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.346455097 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.347006083 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.347011089 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.518821955 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522285938 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522375107 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522557974 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522587061 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.522699118 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522727013 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.522727013 CET	49870	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.522728920 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.522772074 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.522783041 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.522804022 CET	443	49870	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.523180962 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.523205042 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.523240089 CET	49869	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.523247004 CET	443	49869	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.525897980 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.525938034 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.526031971 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.526124954 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.526227951 CET	49874	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.526241064 CET	443	49874	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.526240110 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.526316881 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.526668072 CET	49875	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.526767969 CET	443	49875	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.791559935 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.792027950 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.792046070 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.792500973 CET	49872	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.792505980 CET	443	49872	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.803483963 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.806674004 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.806734085 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.806740999 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.806818962 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.806838036 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.806838036 CET	49871	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.806854963 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.806864977 CET	443	49871	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.809696913 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.809720039 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:35.809798956 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.810034990 CET	49876	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:35.810045958 CET	443	49876	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:36.172316074 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:36.173166037 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:36.173228025 CET	443	49873	13.107.246.63	192.168.2.5
Nov 21, 2024 16:50:36.173629045 CET	49873	443	192.168.2.5	13.107.246.63
Nov 21, 2024 16:50:36.173650026 CET	443	49873	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 16:49:16.699901104 CET	53	59603	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:16.822207928 CET	53	56771	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:18.595300913 CET	51862	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:18.595510960 CET	59116	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:19.613650084 CET	53386	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:19.614068985 CET	51609	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:19.636709929 CET	53	49316	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:20.159012079 CET	53	59116	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:20.159698009 CET	53	51609	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:20.159729958 CET	53	51862	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:20.159775019 CET	53	53386	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:21.125956059 CET	55541	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:21.126158953 CET	56550	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:21.263797045 CET	53	56550	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:21.264012098 CET	53	55541	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:22.401741028 CET	60734	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:22.401884079 CET	61819	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:22.405926943 CET	56998	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:22.406332970 CET	55160	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:22.541572094 CET	53	61819	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:22.545393944 CET	53	56998	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:22.545792103 CET	53	55160	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:24.620601892 CET	62408	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:24.620801926 CET	50204	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:24.648104906 CET	63811	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:24.648284912 CET	63915	53	192.168.2.5	1.1.1.1
Nov 21, 2024 16:49:24.760636091 CET	53	62408	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:24.785890102 CET	53	63915	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:24.785921097 CET	53	63811	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:24.835448980 CET	53	50204	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:37.700851917 CET	53	55968	1.1.1.1	192.168.2.5
Nov 21, 2024 16:49:58.483119011 CET	53	56204	1.1.1.1	192.168.2.5
Nov 21, 2024 16:50:16.671006918 CET	53	50403	1.1.1.1	192.168.2.5
Nov 21, 2024 16:50:22.669325113 CET	53	58266	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 21, 2024 16:49:16.919816971 CET	192.168.2.5	1.1.1.1	c234	(Port unreachable)	Destination Unreachable
Nov 21, 2024 16:49:20.159775019 CET	192.168.2.5	1.1.1.1	c24d	(Port unreachable)	Destination Unreachable
Nov 21, 2024 16:49:24.835520029 CET	192.168.2.5	1.1.1.1	c246	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2024 16:49:18.595300913 CET	192.168.2.5	1.1.1.1	0x15b0	Standard query (0)	klickskydd.skolverket.org	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:18.595510960 CET	192.168.2.5	1.1.1.1	0x9330	Standard query (0)	klickskydd.skolverket.org	65	IN (0x0001)	false
Nov 21, 2024 16:49:19.613650084 CET	192.168.2.5	1.1.1.1	0x96c6	Standard query (0)	klickskydd.skolverket.org	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:19.614068985 CET	192.168.2.5	1.1.1.1	0xb8b0	Standard query (0)	klickskydd.skolverket.org	65	IN (0x0001)	false
Nov 21, 2024 16:49:21.125956059 CET	192.168.2.5	1.1.1.1	0xef71	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:21.126158953 CET	192.168.2.5	1.1.1.1	0x21c2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 16:49:22.401741028 CET	192.168.2.5	1.1.1.1	0x8c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.401884079 CET	192.168.2.5	1.1.1.1	0xb10b	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 21, 2024 16:49:22.405926943 CET	192.168.2.5	1.1.1.1	0x8344	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.406332970 CET	192.168.2.5	1.1.1.1	0x37d6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Nov 21, 2024 16:49:24.620601892 CET	192.168.2.5	1.1.1.1	0xe5fe	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.620801926 CET	192.168.2.5	1.1.1.1	0xbd35	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 21, 2024 16:49:24.648104906 CET	192.168.2.5	1.1.1.1	0x686f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.648284912 CET	192.168.2.5	1.1.1.1	0xee6a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2024 16:49:20.159012079 CET	1.1.1.1	192.168.2.5	0x9330	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:20.159698009 CET	1.1.1.1	192.168.2.5	0xb8b0	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:20.159729958 CET	1.1.1.1	192.168.2.5	0x15b0	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:20.159729958 CET	1.1.1.1	192.168.2.5	0x15b0	No error (0)	clickprotection.skolverket.se		193.235.52.43	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:20.159775019 CET	1.1.1.1	192.168.2.5	0x96c6	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:20.159775019 CET	1.1.1.1	192.168.2.5	0x96c6	No error (0)	clickprotection.skolverket.se		193.235.52.43	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:21.263797045 CET	1.1.1.1	192.168.2.5	0x21c2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 16:49:21.264012098 CET	1.1.1.1	192.168.2.5	0xef71	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.541248083 CET	1.1.1.1	192.168.2.5	0x8c	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:22.541572094 CET	1.1.1.1	192.168.2.5	0xb10b	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:22.545393944 CET	1.1.1.1	192.168.2.5	0x8344	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.545393944 CET	1.1.1.1	192.168.2.5	0x8344	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.545393944 CET	1.1.1.1	192.168.2.5	0x8344	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:22.545393944 CET	1.1.1.1	192.168.2.5	0x8344	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.760636091 CET	1.1.1.1	192.168.2.5	0xe5fe	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 16:49:24.760636091 CET	1.1.1.1	192.168.2.5	0xe5fe	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.760636091 CET	1.1.1.1	192.168.2.5	0xe5fe	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.760636091 CET	1.1.1.1	192.168.2.5	0xe5fe	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.760636091 CET	1.1.1.1	192.168.2.5	0xe5fe	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.785921097 CET	1.1.1.1	192.168.2.5	0x686f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.785921097 CET	1.1.1.1	192.168.2.5	0x686f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.785921097 CET	1.1.1.1	192.168.2.5	0x686f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.785921097 CET	1.1.1.1	192.168.2.5	0x686f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Nov 21, 2024 16:49:24.835448980 CET	1.1.1.1	192.168.2.5	0xbd35	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

klickskydd.skolverket.org

https:

code.jquery.com

fs.microsoft.com

cdn.jsdelivr.net

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:21 UTC	892	OUT	GET /?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:22 UTC	275	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 21 Nov 2024 15:49:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none'
2024-11-21 15:49:22 UTC	1631	IN	Data Raw: 36 35 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 09 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 09 09 3c 74 69 74 6c 65 3e 44 65 66 61 75 6c 74 20 4e 61 6d 65 20 7c 57 61 72 6e 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 09 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f Data Ascii: 653<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>Default Name \|Warning</title><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/boo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:22 UTC	828	OUT	GET /vendor/components/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:22 UTC	345	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 21 Nov 2024 15:49:22 GMT Content-Type: text/css Content-Length: 31000 Last-Modified: Tue, 25 Oct 2016 10:56:23 GMT Connection: close ETag: "580f3a57-7918" Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none' Accept-Ranges: bytes
2024-11-21 15:49:22 UTC	16039	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-11-21 15:49:23 UTC	14961	IN	Data Raw: 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 Data Ascii: t:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 15:49:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=176182 Date: Thu, 21 Nov 2024 15:49:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	151.101.66.137	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:23 UTC	583	OUT	GET /jquery-3.6.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://klickskydd.skolverket.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://klickskydd.skolverket.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:24 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89795 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15ec3" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1562757 Date: Thu, 21 Nov 2024 15:49:24 GMT X-Served-By: cache-lga21953-LGA, cache-nyc-kteb1890094-NYC X-Cache: HIT, HIT X-Cache-Hits: 1273, 0 X-Timer: S1732204164.038726,VS0,VE1 Vary: Accept-Encoding
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 34 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 76 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ve(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ve(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f Data Ascii: "!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=functio
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 Data Ascii: ).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|y.push("\\["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|y.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|y.push(".#.+[+~]"),e.query
2024-11-21 15:49:24 UTC	1378	IN	Data Raw: 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 Data Ascii: ))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPositi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:23 UTC	792	OUT	GET /static/css/base.css HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:24 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 21 Nov 2024 15:49:24 GMT Content-Type: text/css Content-Length: 620 Last-Modified: Thu, 20 Apr 2023 14:06:45 GMT Connection: close ETag: "644146f5-26c" Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none' Accept-Ranges: bytes
2024-11-21 15:49:24 UTC	620	IN	Data Raw: 2e 61 6c 65 72 74 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 2e 63 65 6e 74 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 35 72 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 72 65 6d 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 66 69 78 65 64 20 7b 0a 09 74 61 62 6c 65 2d 6c 61 79 6f 75 74 3a 20 66 69 78 65 64 3b 0a 7d 0a 0a 2e 70 6f 69 6e 74 65 72 2d 69 74 65 6d 20 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 66 69 78 65 64 20 74 64 20 7b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 6f 76 65 Data Ascii: .alert {margin-top: 1.5rem;}.center {padding-top: 1.5rem;padding-bottom: 1.5rem;margin: auto;}.table-fixed {table-layout: fixed;}.pointer-item {cursor: pointer;}.table-fixed td {text-overflow: ellipsis;white-space: nowrap;ove

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49715	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:24 UTC	793	OUT	GET /static/css/check.css HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:24 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 21 Nov 2024 15:49:24 GMT Content-Type: text/css Content-Length: 382 Last-Modified: Thu, 20 Apr 2023 14:06:45 GMT Connection: close ETag: "644146f5-17e" Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none' Accept-Ranges: bytes
2024-11-21 15:49:24 UTC	382	IN	Data Raw: 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 39 35 33 34 66 3b 0a 7d 0a 0a 2e 61 6c 65 72 74 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 32 35 29 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 39 32 62 32 63 3b 0a 7d 0a 0a 2e 61 6c 65 72 74 20 3e 20 73 74 72 6f 6e 67 2c 20 2e 61 6c 65 72 74 20 2e 66 61 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 64 39 35 33 34 66 3b 0a 7d 0a 0a 2e 66 61 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 2d 6f 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 72 65 6d 3b Data Ascii: body {background-color: #d9534f;}.alert {background-color: #fff;border: 1px solid rgba(0, 0, 0, .125);color: #292b2c;}.alert > strong, .alert .fa {color: #d9534f;}.fa-question-circle-o {font-size: 1.5rem;}.lead {margin-top: 1rem;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49721	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 15:49:25 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=176180 Date: Thu, 21 Nov 2024 15:49:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-21 15:49:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	151.101.130.137	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:26 UTC	358	OUT	GET /jquery-3.6.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:26 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89795 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15ec3" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1562759 Date: Thu, 21 Nov 2024 15:49:26 GMT X-Served-By: cache-lga21953-LGA, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 2679, 0 X-Timer: S1732204166.280502,VS0,VE1 Vary: Accept-Encoding
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 34 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.4 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 79 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=y.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 76 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ve(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ve(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 5b 6e 5d 3a 5b 5d 7d 7d 29 3a 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f Data Ascii: "!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=functio
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 79 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 Data Ascii: ).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length\|\|y.push("\\["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|y.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|y.push(".#.+[+~]"),e.query
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 6a 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 Data Ascii: ))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPositi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	151.101.1.229	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:26 UTC	383	OUT	GET /npm/popper.js@1.12.9/dist/umd/popper.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:26 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19188 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.12.9 X-JSD-Version-Type: version ETag: W/"4af4-w7l3qkuN+2nWUeBwFQMdOF3tlks" Accept-Ranges: bytes Age: 1587992 Date: Thu, 21 Nov 2024 15:49:26 GMT X-Served-By: cache-fra-eddf8230041-FRA, cache-ewr-kewr1740030-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e Data Ascii: /* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&defin
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6e 41 6e 63 65 73 74 6f 72 43 6f 6e 74 61 69 6e 65 72 3b 69 66 28 65 21 3d 3d 6c 26 26 74 21 3d 3d 6c 7c 7c 69 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 29 72 65 74 75 72 6e 20 70 28 6c 29 3f 6c 3a 72 28 6c 29 3b 76 61 72 20 66 3d 73 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 68 6f 73 74 3f 64 28 66 2e 68 6f 73 74 2c 74 29 3a 64 28 65 2c 73 28 74 29 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 69 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 Data Ascii: nAncestorContainer;if(e!==l&&t!==l\|\|i.contains(n))return p(l)?l:r(l);var f=s(e);return f.host?d(f.host,t):d(e,s(t).host)}function a(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',i=e.nodeName;if(
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 70 7d 2c 70 3d 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 68 28 29 3a 7b 7d 2c 73 3d 70 2e 77 69 64 74 68 7c 7c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 72 2e 72 69 67 68 74 2d 72 2e 6c 65 66 74 2c 64 3d 70 2e 68 65 69 67 68 74 7c 7c 65 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 72 2e 62 6f 74 74 6f 6d 2d 72 2e 74 6f 70 2c 6c 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 73 2c 6d 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 64 3b 69 66 28 6c 7c 7c 6d 29 7b 76 61 72 20 67 3d 74 28 65 29 3b 6c 2d 3d 66 28 67 2c 27 78 27 29 2c 6d 2d 3d 66 28 67 2c 27 79 27 29 2c 72 2e 77 69 64 74 68 2d 3d 6c 2c 72 2e 68 65 69 67 68 74 2d 3d 6d 7d 72 65 74 75 72 6e 20 63 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 6f 29 7b 76 61 72 20 69 3d 69 Data Ascii: p},p='HTML'===e.nodeName?h():{},s=p.width\|\|e.clientWidth\|\|r.right-r.left,d=p.height\|\|e.clientHeight\|\|r.bottom-r.top,l=e.offsetWidth-s,m=e.offsetHeight-d;if(l\|\|m){var g=t(e);l-=f(g,'x'),m-=f(g,'y'),r.width-=l,r.height-=m}return c(r)}function u(e,o){var i=i
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6d 3d 6d 2b 6c 2e 74 6f 70 2c 70 2e 6c 65 66 74 2b 3d 6c 2e 6c 65 66 74 2d 6c 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 70 2e 72 69 67 68 74 3d 63 2b 6c 2e 6c 65 66 74 7d 65 6c 73 65 20 70 3d 6c 7d 72 65 74 75 72 6e 20 70 2e 6c 65 66 74 2b 3d 69 2c 70 2e 74 6f 70 2b 3d 69 2c 70 2e 72 69 67 68 74 2d 3d 69 2c 70 2e 62 6f 74 74 6f 6d 2d 3d 69 2c 70 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 6f 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 2a 6f 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 6f 2c 69 2c 6e 29 7b 76 61 72 20 72 3d 35 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 35 5d 3a 30 3b 69 66 28 2d 31 Data Ascii: m=m+l.top,p.left+=l.left-l.marginLeft,p.right=c+l.left}else p=l}return p.left+=i,p.top+=i,p.right-=i,p.bottom-=i,p}function E(e){var t=e.width,o=e.height;return t*o}function v(e,t,o,i,n){var r=5<arguments.length&&void 0!==arguments[5]?arguments[5]:0;if(-1
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 5b 73 5d 3d 6f 3d 3d 3d 73 3f 74 5b 73 5d 2d 69 5b 61 5d 3a 74 5b 78 28 73 29 5d 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 3f 65 2e 66 69 6e 64 28 74 29 3a 65 2e 66 69 6c 74 65 72 28 74 29 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 2c 6f 29 7b 69 66 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 49 6e 64 65 78 29 72 65 74 75 72 6e 20 65 2e 66 69 6e 64 49 6e 64 65 78 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 6f 7d 29 3b 76 61 72 20 69 3d 54 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 6f 7d 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 69 29 7d Data Ascii: [s]=o===s?t[s]-i[a]:t[x(s)],n}function T(e,t){return Array.prototype.find?e.find(t):e.filter(t)[0]}function D(e,t,o){if(Array.prototype.findIndex)return e.findIndex(function(e){return e[t]===o});var i=T(e,function(e){return e[t]===o});return e.indexOf(i)}
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 3d 74 5b 6e 5d 2c 72 3d 69 3f 27 27 2b 69 2b 6f 3a 65 3b 69 66 28 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 5b 72 5d 29 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 3d 21 30 2c 6b 28 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 2c 27 61 70 70 6c 79 53 74 79 6c 65 27 29 26 26 28 74 68 69 73 2e 70 6f 70 70 65 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 27 78 2d 70 6c 61 63 65 6d 65 6e 74 27 29 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 27 27 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2e 70 6f 73 Data Ascii: =t[n],r=i?''+i+o:e;if('undefined'!=typeof document.body.style[r])return r}return null}function P(){return this.state.isDestroyed=!0,k(this.modifiers,'applyStyle')&&(this.popper.removeAttribute('x-placement'),this.popper.style.left='',this.popper.style.pos
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 26 26 69 73 46 69 6e 69 74 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 69 3d 27 27 3b 2d 31 21 3d 3d 5b 27 77 69 64 74 68 27 2c 27 68 65 69 67 68 74 27 2c 27 74 6f 70 27 2c 27 72 69 67 68 74 27 2c 27 62 6f 74 74 6f 6d 27 2c 27 6c 65 66 74 27 5d 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 55 28 74 5b 6f 5d 29 26 26 28 69 3d 27 70 78 27 29 2c 65 2e 73 74 79 6c 65 5b 6f 5d 3d 74 5b 6f 5d 2b 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 3b 21 31 3d 3d 3d 69 3f 65 2e 72 65 6d 6f 76 65 Data Ascii: &&isFinite(e)}function Y(e,t){Object.keys(t).forEach(function(o){var i='';-1!==['width','height','top','right','bottom','left'].indexOf(o)&&U(t[o])&&(i='px'),e.style[o]=t[o]+i})}function j(e,t){Object.keys(t).forEach(function(o){var i=t[o];!1===i?e.remove
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 5b 73 5d 26 26 2d 31 3d 3d 3d 70 5b 73 5d 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 4f 66 66 73 65 74 73 20 73 65 70 61 72 61 74 65 64 20 62 79 20 77 68 69 74 65 20 73 70 61 63 65 28 73 29 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 61 20 63 6f 6d 6d 61 20 28 2c 29 20 69 6e 73 74 65 61 64 2e 27 29 3b 76 61 72 20 64 3d 2f 5c 73 2a 2c 5c 73 2a 7c 5c 73 2b 2f 2c 61 3d 2d 31 3d 3d 3d 73 3f 5b 70 5d 3a 5b 70 2e 73 6c 69 63 65 28 30 2c 73 29 2e 63 6f 6e 63 61 74 28 5b 70 5b 73 5d 2e 73 70 6c 69 74 28 64 29 5b 30 5d 5d 29 2c 5b 70 5b 73 5d 2e 73 70 6c 69 74 28 64 29 5b 31 5d 5d 2e 63 6f 6e 63 61 74 28 70 2e 73 6c 69 63 65 28 73 2b 31 29 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e Data Ascii: [s]&&-1===p[s].indexOf(',')&&console.warn('Offsets separated by white space(s) are deprecated, use a comma (,) instead.');var d=/\s,\s\|\s+/,a=-1===s?[p]:[p.slice(0,s).concat([p[s].split(d)[0]]),[p[s].split(d)[1]].concat(p.slice(s+1))];return a=a.map(fun
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 70 70 56 65 72 73 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 4d 53 49 45 20 31 30 27 29 29 2c 69 7d 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 27 29 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 6f 3d 74 5b 6e 5d 2c 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6f 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 27 76 61 6c 75 65 27 69 6e 20 6f 26 Data Ascii: ppVersion.indexOf('MSIE 10')),i},ne=function(e,t){if(!(e instanceof t))throw new TypeError('Cannot call a class as a function')},re=function(){function e(e,t){for(var o,n=0;n<t.length;n++)o=t[n],o.enumerable=o.enumerable\|\|!1,o.configurable=!0,'value'in o&
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 5b 65 5d 3d 73 65 28 7b 7d 2c 74 2e 44 65 66 61 75 6c 74 73 2e 6d 6f 64 69 66 69 65 72 73 5b 65 5d 7c 7c 7b 7d 2c 72 2e 6d 6f 64 69 66 69 65 72 73 3f 72 2e 6d 6f 64 69 66 69 65 72 73 5b 65 5d 3a 7b 7d 29 7d 29 2c 74 68 69 73 2e 6d 6f 64 69 66 69 65 72 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6e 61 6d 65 3a 65 7d 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 5b 65 5d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6f 72 64 65 72 2d 74 2e 6f 72 64 65 72 7d 29 Data Ascii: nction(e){n.options.modifiers[e]=se({},t.Defaults.modifiers[e]\|\|{},r.modifiers?r.modifiers[e]:{})}),this.modifiers=Object.keys(this.options.modifiers).map(function(e){return se({name:e},n.options.modifiers[e])}).sort(function(e,t){return e.order-t.order})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	151.101.1.229	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:26 UTC	384	OUT	GET /npm/bootstrap@4.6.2/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:26 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62563 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.6.2 X-JSD-Version-Type: version ETag: W/"f463-4yQGPI9GxrKUJ98VQvECatIw9gQ" Accept-Ranges: bytes Age: 2529836 Date: Thu, 21 Nov 2024 15:49:26 GMT X-Served-By: cache-fra-eddf8230140-FRA, cache-ewr-kewr1740070-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 28 29 29 7d 77 68 69 6c 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 3d 6e 26 26 22 23 22 21 3d 3d 6e 3f 6e 2e 74 72 69 6d 28 29 3a 22 22 7d 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d Data Ascii: ())}while(document.getElementById(t));return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");if(!e\|\|"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}}
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 64 65 66 61 75 6c 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 2e 20 6a 51 75 65 72 79 20 6d 75 73 74 20 62 65 20 69 6e 63 6c 75 64 65 64 20 62 65 66 6f 72 65 20 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 2e 22 29 3b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 74 5b 30 5d 3c 32 26 26 74 5b 31 5d 3c 39 7c 7c 31 3d 3d 3d 74 5b 30 5d 26 26 39 3d 3d 3d 74 5b 31 5d 26 26 74 5b 32 5d 3c 31 7c 7c 74 5b Data Ascii: n(){if("undefined"==typeof o.default)throw new TypeError("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=o.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9\|\|1===t[0]&&9===t[1]&&t[2]<1\|\|t[
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 74 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 22 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 29 7b 76 61 72 20 6e 3d 64 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e Data Ascii: t(t).removeClass("show"),o.default(t).hasClass("fade")){var n=d.getTransitionDurationFromElement(t);o.default(t).one(d.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=fun
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 7d 74 26 26 28 22 63 68 65 63 6b 62 6f 78 22 21 3d 3d 69 2e 74 79 70 65 26 26 22 72 61 64 69 6f 22 21 3d 3d 69 2e 74 79 70 65 7c 7c 28 69 2e 63 68 65 63 6b 65 64 3d 21 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 5f 29 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 41 76 6f 69 64 54 72 69 67 67 65 72 43 68 61 6e 67 65 7c 7c 6f 2e 64 65 66 61 75 6c 74 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 2c 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f Data Ascii: a).removeClass(_)}t&&("checkbox"!==i.type&&"radio"!==i.type\|\|(i.checked=!this._element.classList.contains(_)),this.shouldAvoidTriggerChange\|\|o.default(i).trigger("change")),i.focus(),e=!1}}this._element.hasAttribute("disabled")\|\|this._element.classList.co
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 64 65 66 61 75 6c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 2e 62 73 2e 62 75 74 74 6f 6e 2e 64 61 74 61 2d 61 70 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 20 2e 62 74 6e 27 29 29 2c 65 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 79 29 3b 6f 2e 63 68 65 63 6b 65 64 7c 7c 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 63 68 65 63 6b 65 64 22 29 3f 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 5f 29 3a 69 2e 63 Data Ascii: default(window).on("load.bs.button.data-api",(function(){for(var t=[].slice.call(document.querySelectorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector(y);o.checked\|\|o.hasAttribute("checked")?i.classList.add(_):i.c
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3e 30 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 4e 29 7d 2c 65 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 21 64 6f 63 75 Data Ascii: maxTouchPoints>0,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var e=t.prototype;return e.next=function(){this._isSliding\|\|this._slide(N)},e.nextWhenVisible=function(){var t=o.default(this._element);!docu
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 72 28 7b 7d 2c 6b 2c 74 29 2c 64 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 54 2c 74 2c 4f 29 2c 74 7d 2c 65 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 Data Ascii: is._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(t){return t=r({},k,t),d.typeCheckConfig(T,t,O),t},e._handleSwipe=function(){var t=Math.abs(this.touc
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 29 29 2e 6f 6e 28 22 64 72 61 67 73 74 61 72 74 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 70 6f 69 6e 74 65 72 75 70 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7d 29 29 2c 74 Data Ascii: )).on("dragstart.bs.carousel",(function(t){return t.preventDefault()})),this._pointerEvent?(o.default(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),o.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),t
2024-11-21 15:49:26 UTC	1378	IN	Data Raw: 61 3d 6f 2e 64 65 66 61 75 6c 74 2e 45 76 65 6e 74 28 22 73 6c 69 64 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 74 2c 64 69 72 65 63 74 69 6f 6e 3a 65 2c 66 72 6f 6d 3a 69 2c 74 6f 3a 6e 7d 29 3b 72 65 74 75 72 6e 20 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 61 29 2c 61 7d 2c 65 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c Data Ascii: a=o.default.Event("slide.bs.carousel",{relatedTarget:t,direction:e,from:i,to:n});return o.default(this._element).trigger(a),a},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:26 UTC	698	OUT	GET /vendor/components/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://klickskydd.skolverket.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://klickskydd.skolverket.org/vendor/components/font-awesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:27 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 21 Nov 2024 15:49:26 GMT Content-Type: application/octet-stream Content-Length: 77160 Last-Modified: Tue, 25 Oct 2016 10:56:23 GMT Connection: close ETag: "580f3a57-12d68" Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none' Accept-Ranges: bytes
2024-11-21 15:49:27 UTC	16022	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-11-21 15:49:27 UTC	16384	IN	Data Raw: 51 83 7d ee 1c 5c 54 be 48 29 0a 9f 39 46 61 b1 bb 22 5e e0 62 a6 41 3a 91 dd b3 51 34 b1 bb 27 20 ca 3d bd 73 4f 09 0f a1 03 10 c3 f1 27 83 1b 19 40 02 2e 9a e8 d9 59 26 38 7a 0a 8a 2c 69 37 15 1a b2 b5 a3 ea fd 33 79 d8 c1 3b 8d 81 eb 55 7d 70 2f df 49 9f 0c 01 eb ff 0b 78 56 f9 78 d6 de 69 6c f8 46 bd 5a c5 ea 66 9b ff cb f9 68 58 da 63 87 98 d4 ec 1e 2e 62 0c e8 ea 42 2a ac 7c 26 bf e2 8f 7c 67 ab b7 65 2f ca 6b c8 75 bb fe 76 5c 5f 48 87 b6 9e 9e 62 82 a0 0c 07 fa 64 d9 70 e1 47 9b be 2f eb 41 9a 7d f3 c0 08 e3 ac ac 27 ec f7 78 c8 9c ae d5 8b e1 b9 3b d6 45 f0 dd d8 e9 0a cb 21 57 b8 dc df e8 04 07 80 6a cc cc 7b aa ed 9c d9 5a 49 24 df 7a be 7b 4f de 14 70 af 1e 3b e7 78 a6 12 b0 3d d7 ba 98 71 de 7b fd d3 f5 a0 f5 c9 35 fa 6c 32 b8 33 4f 8e 0c e5 Data Ascii: Q}\TH)9Fa"^bA:Q4' =sO'@.Y&8z,i73y;U}p/IxVxilFZfhXc.bB*\|&\|ge/kuv\_HbdpG/A}'x;E!Wj{ZI$z{Op;x=q{5l23O
2024-11-21 15:49:27 UTC	16384	IN	Data Raw: b7 6c 4d 12 ee be dc b0 d9 16 a1 54 41 ef 94 24 b6 9c 56 48 47 7c e7 b3 ec 0a 88 17 24 c7 0f 0b 0b ea f9 3a 1d c7 12 31 52 0c 15 73 5c f0 5a 20 14 24 91 50 6a d7 db 87 bd 8f 5d d9 8b c6 67 d8 38 60 e7 b0 86 20 16 fb 7a df 92 f2 a4 cb 56 d4 58 8f 19 15 a3 dd 95 78 ba 72 74 58 2f a0 41 d1 70 d7 32 b4 0f 08 5e 5b 31 7e 52 7b ef 08 eb 9a ac 97 19 b2 bc c9 87 a2 3a 6b 0e 43 11 55 12 27 35 6e 98 90 1c 25 a1 27 d7 43 58 02 50 30 36 47 83 db ae 91 fb 6c 5b e9 3c 96 1b 4e 83 73 63 4f 46 65 51 fa ca 2d 92 67 69 24 f3 18 52 4e e8 13 b2 fd 6f 19 37 d2 57 7a 9a 0d 5f 74 ba b9 22 3f ea 7a 3c 51 d5 eb 6c 26 b5 91 42 2c 35 ec a5 22 fa 7d 12 5c d9 11 db 69 5e 93 7c 7d c3 f0 b1 a2 52 9f 9c bd d8 19 e8 b4 6c 0f 3b 7f 24 89 8c d1 bb f9 27 64 78 77 e1 f2 41 2a c6 cd ba 31 0f Data Ascii: lMTA$VHG\|$:1Rs\Z $Pj]g8` zVXxrtX/Ap2^[1~R{:kCU'5n%'CXP06Gl[<NscOFeQ-gi$RNo7Wz_t"?z<Ql&B,5"}\i^\|}Rl;$'dxwA*1
2024-11-21 15:49:27 UTC	16384	IN	Data Raw: 8e 88 27 07 b4 1c e5 26 66 29 e1 8b 47 4c 7c 9f c6 ad 2a e1 87 1c 51 db dc 70 72 a5 a3 83 7e ee 1a 3b ce 5a f1 b4 92 7f c3 49 5d ac dd 0d 21 3c f9 61 50 7f 42 b7 49 ee f3 0e 62 b8 43 55 78 d0 8f 1c 0e f6 fd 45 67 ff c6 43 7f ff 28 a6 3c 15 7f 67 b7 64 ef db d7 d0 a0 72 4d 7b 4c 57 d2 ae 47 07 68 12 37 fc 39 b3 57 f7 46 c9 9c 2c 73 52 06 85 cb df 95 7a 48 37 d2 7a cf 99 cc 46 72 63 48 4b fc ff f8 1a df 6f 19 53 ae e1 e3 46 61 30 19 c3 16 ad 7a b2 81 95 68 c7 43 aa 1c ce d7 3a 2b 06 2f a1 9d af d5 d2 ad fd 5b 2d 57 98 c0 20 70 02 94 04 c0 d0 33 14 76 e8 ed 5c 75 71 c7 47 47 2b d4 9b 44 58 29 dd e0 9e 03 27 d6 06 e3 b7 26 4d eb 75 19 c6 97 d3 c3 9b 7e 45 ad bc de 88 8c 57 7f 17 70 a7 f6 db 35 02 4a d9 70 47 d5 a0 d3 d2 f4 b4 30 cc ea 8c 5f d5 d4 8d aa 8e 00 Data Ascii: '&f)GL\|*Qpr~;ZI]!<aPBIbCUxEgC(<gdrM{LWGh79WF,sRzH7zFrcHKoSFa0zhC:+/[-W p3v\uqGG+DX)'&Mu~EWp5JpG0_
2024-11-21 15:49:27 UTC	11986	IN	Data Raw: f9 a7 22 39 c5 97 35 9e d8 c3 39 e0 1e 80 38 56 06 be ea b8 78 ac 07 68 ea 5f 64 5e cb 3a 93 7c 78 6d 57 01 28 9f b7 7e ab df 0d fa 4d ea 79 81 2b a5 29 23 12 25 ca 82 b5 99 1f 75 fd aa 85 9d 82 7e de af be 16 fb 87 d1 89 8b 2a b7 f4 a4 b7 c5 4b 13 a3 94 58 8e 83 af ef 3c f8 cf d1 67 ab fb 37 00 7c 60 10 80 cd da d6 7a 12 b0 c6 48 30 95 1c b4 cf 69 6b 59 98 3d 32 c7 16 16 e4 e1 ef fb e5 6e 0d 5f fb d7 75 ff 58 bf fe 47 57 56 d2 b9 8e 8e b3 81 59 5d 2f 4b 3c 4a ee 54 64 6e 16 9d b8 b8 59 b3 ed e6 f5 4a 4d 36 40 e0 e7 72 dd 8d 9c 1b f3 4e fb 62 6a be ef d3 44 1d 38 b5 7c 20 cd c2 27 e4 2b 5e 0e b7 6a 8d 8b 74 7d 8c f3 07 fb ce 81 b4 62 46 41 47 c4 8a 90 a4 bd cc 83 f9 e9 a2 2f af 9d 63 96 44 a7 3b 27 66 b4 7b 73 88 29 79 b1 c0 18 27 fa 09 f9 4b 31 37 b4 fa Data Ascii: "9598Vxh_d^:\|xmW(~My+)#%u~*KX<g7\|`zH0ikY=2n_uXGWVY]/K<JTdnYJM6@rNbjD8\| '+^jt}bFAG/cD;'f{s)y'K17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49727	193.235.52.43	443	5168	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:29 UTC	830	OUT	GET /favicon.ico HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 15:49:29 UTC	166	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 21 Nov 2024 15:49:29 GMT Content-Type: text/html Content-Length: 1504 Connection: close ETag: "64510b69-5e0"
2024-11-21 15:49:29 UTC	1504	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>404 File not found!</title> <style> @import url("https://fonts.googleapis.com/css?family=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bogGn1CdOPdgeMZ&MD=Hgaowp6M HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 15:49:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bb3de0c9-e6f1-410b-8f63-10af67890481 MS-RequestId: d5af6cc7-4c88-4b32-b0a2-3a1092225522 MS-CV: Vcu6G7vc3kSwhSW4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 15:49:30 GMT Connection: close Content-Length: 24490
2024-11-21 15:49:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-21 15:49:32 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:32 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:32 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:32 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 16:37:24 GMT ETag: "0x8DD08B87243495C" x-ms-request-id: b5254561-a01e-0070-0158-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154932Z-1777c6cb7544nvmshC1TEBf7qc0000000b5g000000006fa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:32 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-21 15:49:32 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-21 15:49:32 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-21 15:49:33 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:35 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154935Z-1777c6cb754gc8g6hC1TEB966c0000000b5g00000000rzu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:35 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:35 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154935Z-r1d97b99577ckpmjhC1TEBrzs00000000akg00000000efww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:35 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:35 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154935Z-178bfbc474bnwsh4hC1NYC2ubs00000001u0000000005z6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:35 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:35 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05856cf7-f01e-0020-4060-3b956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154935Z-178bfbc474btrnf9hC1NYCb80g00000001u000000000m35n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:35 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:35 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154935Z-178bfbc474brk967hC1NYCfu6000000001c000000000v97u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:37 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154937Z-178bfbc474bpnd5vhC1NYC4vr400000001p000000000nbwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:37 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154937Z-1777c6cb754whff4hC1TEBcd6c0000000a10000000002csy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:37 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154937Z-1777c6cb754b7tdghC1TEBwwa40000000b9g00000000snzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:37 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154937Z-178bfbc474bp8mkvhC1NYCzqnn00000001d000000000w6sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:38 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:37 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: b54876a2-a01e-0070-6764-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154937Z-178bfbc474bwh9gmhC1NYCy3rs00000001rg00000000k888 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:38 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:39 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154939Z-178bfbc474bscnbchC1NYCe7eg00000001qg00000000yeah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:39 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 3e1ce11e-901e-00ac-5292-3bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154939Z-r1d97b995777mdbwhC1TEBezag0000000akg000000008xa1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:39 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4e7b5ce8-701e-0098-117a-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154940Z-178bfbc474bkvpdnhC1NYCuu2w00000001q000000000nnuu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:39 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154940Z-178bfbc474bwlrhlhC1NYCy3kg00000001ng00000000qr3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:39 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154940Z-1777c6cb754g9zd5hC1TEBfvpw0000000bbg00000000qeep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:41 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154941Z-1777c6cb754g9zd5hC1TEBfvpw0000000bfg000000006ud7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:41 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 3c827ba2-d01e-0014-367c-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154942Z-178bfbc474b9xljthC1NYCtw9400000001k000000000kufd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:41 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154942Z-178bfbc474bpnd5vhC1NYC4vr400000001qg00000000ampv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:42 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8189730a-201e-0003-216a-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154942Z-178bfbc474bgvl54hC1NYCsfuw00000001rg000000005gan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:42 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:42 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bb18f6-501e-000a-54a9-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154942Z-1777c6cb754gvvgfhC1TEBz4rg0000000bf0000000000ra4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:43 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154944Z-1777c6cb754whff4hC1TEBcd6c00000009vg00000000nyz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:44 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:44 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 15b3feff-401e-0035-6e29-3c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154944Z-r1d97b99577gg97qhC1TEBcrf40000000abg00000000eese x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 15:49:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:44 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2b92647c-c01e-00a2-646f-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154944Z-1777c6cb754n67brhC1TEBcp9c0000000b8000000000s2ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:44 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 20c6f849-701e-005c-2e61-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154944Z-178bfbc474bkvpdnhC1NYCuu2w00000001r000000000fegh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:44 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 5bcf05b2-a01e-006f-6e7a-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154944Z-1777c6cb754mqztshC1TEB4mkc0000000bc0000000009d9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:44 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b7984a43-301e-0051-7aa9-3b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154946Z-r1d97b99577dd2gchC1TEBz5ys0000000a8g00000000qwu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154946Z-178bfbc474b7cbwqhC1NYC8z4n00000001gg00000000rck5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154946Z-1777c6cb754xjpthhC1TEBexs80000000b2g00000000nvck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 15a67567-d01e-0066-07eb-3bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154946Z-r1d97b99577brct2hC1TEBambg000000048000000000byhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:46 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:47 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 3af7945d-501e-0016-1564-3b181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154946Z-178bfbc474bgvl54hC1NYCsfuw00000001rg000000005gw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:48 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154949Z-1777c6cb754ww792hC1TEBzqu40000000b2000000000p067 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:48 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c296684d-b01e-0053-2a99-3bcdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154949Z-r1d97b99577brct2hC1TEBambg000000048000000000byt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:48 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154949Z-178bfbc474bxkclvhC1NYC69g400000001kg00000000m1b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:49 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:48 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154949Z-1777c6cb754j47wfhC1TEB5wrw000000071000000000rrbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:49 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:48 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: bf645307-501e-007b-7599-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154949Z-r1d97b99577n5jhbhC1TEB74vn0000000akg000000006wzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:50 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 792329fd-401e-0035-1f6c-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154951Z-178bfbc474b9fdhphC1NYCac0n00000001p00000000092aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:51 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:50 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154951Z-178bfbc474bpnd5vhC1NYC4vr400000001mg00000000r0z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:51 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:50 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 20e2cd06-701e-005c-2869-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154951Z-178bfbc474bmqmgjhC1NYCy16c00000001rg00000000hf5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:51 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: ae8c6dce-101e-008d-4280-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154951Z-1777c6cb754whff4hC1TEBcd6c0000000a10000000002dy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:51 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:51 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154951Z-178bfbc474bbbqrhhC1NYCvw7400000001xg0000000021be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:53 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 00deeadb-901e-007b-4a91-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154953Z-r1d97b99577xdmfxhC1TEBqbhg000000026g00000000c9uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:53 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:53 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1c81f4ad-001e-005a-6fbf-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154953Z-1777c6cb754mqztshC1TEB4mkc0000000b8000000000q99n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:53 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:53 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5b8d3f05-a01e-006f-2465-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154953Z-178bfbc474bwh9gmhC1NYCy3rs00000001qg00000000qf7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:53 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:53 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5ac7c1c0-801e-0083-5da5-3bf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154953Z-r1d97b99577brct2hC1TEBambg000000048000000000bz1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:53 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:53 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154953Z-178bfbc474brk967hC1NYCfu6000000001e000000000np01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:53 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:55 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 24f33e75-301e-006e-0fb5-3bf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154955Z-1777c6cb754xjpthhC1TEBexs80000000b80000000000tyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:55 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:55 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:55 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154955Z-178bfbc474bbcwv4hC1NYCypys00000001dg00000000vv7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:55 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154955Z-178bfbc474b7cbwqhC1NYC8z4n00000001fg00000000unba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:55 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:55 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154955Z-r1d97b995777mdbwhC1TEBezag0000000adg00000000rwuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:55 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:55 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 40c83c0a-001e-00ad-1e79-3b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154955Z-1777c6cb754xrr98hC1TEB3kag0000000b5g000000009aff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:56 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:57 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154957Z-178bfbc474bxkclvhC1NYC69g400000001p0000000009bg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:57 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 449238ea-501e-0029-7d7c-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154958Z-1777c6cb754b7tdghC1TEBwwa40000000be000000000bpvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:57 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154958Z-178bfbc474bw8bwphC1NYC38b400000001mg000000001q1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:57 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: c3a4d188-401e-0083-6b19-3b075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154958Z-r1d97b99577n4dznhC1TEBc1qw0000000ag000000000mgc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:57 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:49:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:49:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8ce121a2-801e-0035-3fd5-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T154958Z-r1d97b99577brct2hC1TEBambg00000004b0000000002qnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:49:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:49:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cf2b2526-c01e-0082-5660-3baf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155000Z-178bfbc474brk967hC1NYCfu6000000001k0000000003npu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:00 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:00 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155000Z-178bfbc474b7cbwqhC1NYC8z4n00000001m000000000f51n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:00 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:00 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c9d6026a-001e-0014-11f3-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155000Z-r1d97b99577jlrkbhC1TEBq8d00000000acg00000000gkbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:00 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2deeee2f-b01e-001e-4967-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155000Z-178bfbc474b7cbwqhC1NYC8z4n00000001fg00000000uns3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:00 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:00 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155000Z-178bfbc474b7cbwqhC1NYC8z4n00000001k000000000k9f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:00 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:02 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 957844e9-801e-008c-4868-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155002Z-178bfbc474b9xljthC1NYCtw9400000001g000000000vp02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:02 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155002Z-178bfbc474bv587zhC1NYCny5w00000001fg00000000s5tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 15:50:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:02 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8d96ff29-301e-0020-36b1-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155002Z-r1d97b99577dd2gchC1TEBz5ys0000000adg0000000090e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:02 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 93cb4751-801e-0035-13e8-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155002Z-r1d97b99577hsvhhhC1TEByb1w00000004rg00000000n554 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:02 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155002Z-1777c6cb754j47wfhC1TEB5wrw0000000770000000003p1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:04 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:04 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 32ea5c27-601e-003d-489b-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155004Z-r1d97b99577brct2hC1TEBambg000000049g0000000079t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 15:50:04 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:04 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155004Z-178bfbc474bxkclvhC1NYC69g400000001gg00000000vffm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:04 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 925146da-101e-0034-3f87-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155004Z-r1d97b99577dd2gchC1TEBz5ys0000000adg0000000090kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:04 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155004Z-1777c6cb754lvj6mhC1TEBke940000000bd0000000007u4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:04 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 391e256c-401e-00ac-3fcb-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155005Z-r1d97b99577brct2hC1TEBambg0000000490000000009kh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:06 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155006Z-1777c6cb7549j9hhhC1TEBzmcc0000000b6000000000hwun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:06 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 18e5e448-501e-000a-7b67-3b0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155006Z-178bfbc474bwlrhlhC1NYCy3kg00000001ng00000000qsks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:06 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155007Z-1777c6cb754whff4hC1TEBcd6c0000000a10000000002f42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:07 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:06 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155007Z-178bfbc474bkvpdnhC1NYCuu2w00000001s000000000bmnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:07 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:07 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 6a968014-801e-0015-537c-3bf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155007Z-178bfbc474b7cbwqhC1NYC8z4n00000001pg000000003wm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:07 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:08 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:09 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:09 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155009Z-1777c6cb754lv4cqhC1TEB13us0000000b9g00000000cdyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:09 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:08 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:09 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 848b8d5b-d01e-00a1-7163-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155009Z-178bfbc474bv7whqhC1NYC1fg400000001rg000000007s7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:09 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:09 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:09 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:09 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e7fd51b1-801e-0067-1163-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155009Z-178bfbc474bbcwv4hC1NYCypys00000001h000000000fanh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:09 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:09 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:09 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 53933106-a01e-0032-6c7f-3b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155009Z-r1d97b99577n5jhbhC1TEB74vn0000000ah000000000btr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:09 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:09 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:09 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:09 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f77b0594-001e-0014-3c66-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155009Z-178bfbc474b9fdhphC1NYCac0n00000001kg00000000ky98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:09 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:10 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:11 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155011Z-1777c6cb754mqztshC1TEB4mkc0000000bd0000000005288 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:10 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:11 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155011Z-178bfbc474bw8bwphC1NYC38b400000001e000000000thq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:11 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155011Z-1777c6cb754xrr98hC1TEB3kag0000000b8g000000000w5g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:11 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155011Z-178bfbc474btvfdfhC1NYCa2en00000001v0000000002wqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:11 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:12 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155011Z-r1d97b99577n5jhbhC1TEB74vn0000000ag000000000dxmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49820	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:11 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bogGn1CdOPdgeMZ&MD=Hgaowp6M HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 15:50:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 1782ac1a-f702-4453-b020-7f27e2dc6a59 MS-RequestId: 95567678-cc1f-48aa-b5a0-75d144f84acb MS-CV: UX8djQtGLEq50uJJ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 15:50:11 GMT Connection: close Content-Length: 30005
2024-11-21 15:50:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-21 15:50:12 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:13 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:13 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1a87898e-001e-002b-2066-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155013Z-178bfbc474bpnd5vhC1NYC4vr400000001pg00000000fceg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:13 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:13 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155013Z-1777c6cb754gc8g6hC1TEB966c0000000b8g00000000efsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:13 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:14 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155013Z-r1d97b99577ckpmjhC1TEBrzs00000000am000000000cfz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:13 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:14 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 9e236b6e-d01e-0049-16a6-3be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155013Z-r1d97b99577kk29chC1TEBemmg0000000an000000000ac33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:14 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:14 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155014Z-1777c6cb754gvvgfhC1TEBz4rg0000000b9g00000000nwx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:14 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:15 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:15 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155015Z-178bfbc474bwh9gmhC1NYCy3rs00000001pg00000000tx4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:15 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:15 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:15 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c363d474-d01e-0028-1b8c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155015Z-1777c6cb754xjpthhC1TEBexs80000000b2000000000nvg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:15 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:15 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: f18ba134-001e-008d-7b76-3bd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155016Z-r1d97b99577xdmfxhC1TEBqbhg000000029g000000002xdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:16 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155016Z-178bfbc474bscnbchC1NYCe7eg00000001r000000000wcvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:16 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:16 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: dcdca57e-b01e-003e-0dcb-3b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155016Z-r1d97b99577d6qrbhC1TEBux5s0000000akg00000000p90h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:17 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155018Z-1777c6cb754vxwc9hC1TEBykgw0000000bcg00000000195h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:17 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 358685dd-301e-005d-4f7d-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155018Z-1777c6cb7549x5qchC1TEBggbg0000000bb000000000f58y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:18 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155018Z-178bfbc474b7cbwqhC1NYC8z4n00000001f000000000wz23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155018Z-1777c6cb7544nvmshC1TEBf7qc0000000b0000000000tvre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:18 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: b21886d4-801e-0048-19a5-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155018Z-r1d97b99577xdmfxhC1TEBqbhg00000002a0000000001g26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:19 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:20 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 38659630-901e-008f-15a0-3b67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155020Z-r1d97b99577l6wbzhC1TEB3fwn0000000am000000000kqas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:20 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:20 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155020Z-178bfbc474bvjk8shC1NYC83ns00000001k0000000009eug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 15:50:20 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:20 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:20 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155020Z-r1d97b995778dpcthC1TEB4b540000000ah0000000004bc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:20 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:20 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:21 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155020Z-178bfbc474bq2pr7hC1NYCkfgg00000001qg00000000wnwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:21 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:20 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:21 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:20 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c7391ddf-401e-0064-3568-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155020Z-1777c6cb754j47wfhC1TEB5wrw000000073000000000kdp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:21 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:22 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:22 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:22 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155022Z-r1d97b99577brct2hC1TEBambg000000044g00000000pb1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:22 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:22 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:23 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:23 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: dd43f91c-901e-005b-7e7f-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155023Z-1777c6cb754xrr98hC1TEB3kag0000000b8g000000000www x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:23 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:23 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:23 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:23 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8f84e55-c01e-0079-2269-3be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155023Z-178bfbc474bv7whqhC1NYC1fg400000001s00000000054uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:23 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:23 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:23 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:23 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 443fb44f-501e-0029-3f61-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155023Z-178bfbc474bfw4gbhC1NYCunf400000001n000000000t0z1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:23 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:23 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:23 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155023Z-178bfbc474bkvpdnhC1NYCuu2w00000001rg00000000e2g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:23 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 06e9cdc8-b01e-0002-45ce-3b1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155024Z-178bfbc474bfw4gbhC1NYCunf400000001r000000000a8t5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:25 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:25 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: e32f1f1e-f01e-003f-51ae-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155025Z-r1d97b9957747b9jhC1TEBgyec0000000ak000000000pnk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:25 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:26 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: c1752d23-d01e-007a-698f-3bf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155025Z-r1d97b995774zjnrhC1TEBv1ww0000000ahg000000008mxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:25 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:26 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155025Z-178bfbc474brk967hC1NYCfu6000000001gg00000000aqgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:26 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:25 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:26 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 2c427fe0-d01e-0082-2d87-3be489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155026Z-1777c6cb754g9zd5hC1TEBfvpw0000000bgg000000003mpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:27 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:27 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155027Z-178bfbc474bkvpdnhC1NYCuu2w00000001v0000000001d4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:27 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:28 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ed229d32-001e-008d-11c1-3bd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155028Z-r1d97b99577l6wbzhC1TEB3fwn0000000am000000000kqp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:28 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:28 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 0b679675-f01e-005d-336b-3b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155028Z-178bfbc474b9fdhphC1NYCac0n00000001ng00000000akh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:28 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:28 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:28 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155028Z-178bfbc474bw8bwphC1NYC38b400000001c000000000yrp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:28 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:29 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 32afe7a4-a01e-0021-2bc3-3b814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155029Z-r1d97b99577d6qrbhC1TEBux5s0000000ap000000000gbtv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:29 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9124427f-001e-0014-65e2-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155029Z-r1d97b995774n5h6hC1TEBvf840000000ah000000000dgfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:30 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d606dcfe-601e-003e-695e-3b3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155030Z-178bfbc474bnwsh4hC1NYC2ubs00000001t000000000auym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:30 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:30 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: de9d050e-401e-0078-2067-3b4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155030Z-178bfbc474bvjk8shC1NYC83ns00000001eg00000000t7kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:30 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:30 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 5b95a93a-a01e-006f-7568-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155030Z-178bfbc474bq2pr7hC1NYCkfgg00000001wg000000005py8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:31 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:31 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c70c13b9-401e-0064-2959-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155031Z-178bfbc474btvfdfhC1NYCa2en00000001v0000000002z3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:31 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:31 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 11fd19a1-001e-0046-3f80-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155031Z-1777c6cb754rz2pghC1TEBghen0000000b5g00000000g965 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:32 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:32 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:32 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155032Z-178bfbc474b9fdhphC1NYCac0n00000001hg00000000ps8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:32 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:32 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155032Z-1777c6cb754j47wfhC1TEB5wrw000000073g00000000g6yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:33 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:33 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:33 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a4032f19-b01e-0084-598d-3bd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155033Z-1777c6cb754ww792hC1TEBzqu40000000b600000000075qc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:33 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:33 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 1f0666f4-801e-007b-6865-3be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155033Z-178bfbc474bbcwv4hC1NYCypys00000001dg00000000vxpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:33 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c1bcbb00-101e-0065-7560-3b4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155034Z-178bfbc474bvjk8shC1NYC83ns00000001mg0000000028yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:35 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:35 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:35 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: e84d7653-101e-0028-0dc3-3b8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155035Z-r1d97b99577n4dznhC1TEBc1qw0000000aqg000000001s1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 15:50:35 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:35 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:35 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155035Z-178bfbc474bwh9gmhC1NYCy3rs00000001r000000000ncg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:35 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:35 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:35 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155035Z-1777c6cb754xjpthhC1TEBexs80000000b1g00000000qcsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:35 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 15:50:35 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 15:50:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 15:50:36 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 736e7e4b-801e-0035-118c-3a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T155036Z-r1d97b99577tssmjhC1TEB8kan0000000akg0000000008yk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 15:50:36 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2700, Parent PID: 5748

General

Target ID:	0
Start time:	10:49:11
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5168, Parent PID: 2700

General

Target ID:	2
Start time:	10:49:15
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1892,i,4899111604409082242,2871220154197983300,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6380, Parent PID: 5748

General

Target ID:	3
Start time:	10:49:17
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
https://klickskydd.skolverket.org/?url=https://www3.lead.app/unsubscribe?lang=en&email_address=csilla.szep%40skolverket.se&u_token=gAAAAABnPuap06Ak8tBYbNOkJ3L3rremZJaZp9Qu6cgvFQ22dcQ4-nY10yZY1qgWzSwY7CriOpLOA6Vi1rVxvF24fCtTaqj2NHF7bbzqSQabh7x2PdA5tJ4%3D&body