Edit tour

Windows Analysis Report
http://bc1qcr8muz00d2v7uqg5ggulrmm.com

Overview

General Information

Sample URL:	http://bc1qcr8muz00d2v7uqg5ggulrmm.com
Analysis ID:	1560412
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2208,i,6040105471244609936,12926534456353451220,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bc1qcr8muz00d2v7uqg5ggulrmm.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 401Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Nov 2024 18:27:16 GMTContent-Type: application/jsonContent-Length: 22Connection: closecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e62bb9c7d1b0dc7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1800&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2883&recv_bytes=1252&delivery_rate=1615938&cwnd=224&unsent_bytes=0&cid=bb6d63e75a7e49b0&ts=684&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 21 Nov 2024 18:27:20 GMTContent-Type: application/jsonContent-Length: 22Connection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfu%2Btz1FRrtkYJxCnYs91R6UO1e2A4l5UhKKHlOQF%2BVSh8OaP%2F%2Bq9T4A27Hg43RZdYEsH3w3oBwS0L3Ll6HhGFDDl1a%2BVo%2BVc%2FFYCv9b0Tu9kTP9%2FK7Fc3ylfEZt2PhHBL61igyEidAbuMoyeV44DvQl"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8e62bbb2afa3b9d3-SEAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=69538&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2883&recv_bytes=1196&delivery_rate=42023&cwnd=32&unsent_bytes=0&cid=c0a25552cceb6e14&ts=906&x=0"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49758 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@17/4@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2208,i,6040105471244609936,12926534456353451220,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bc1qcr8muz00d2v7uqg5ggulrmm.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2208,i,6040105471244609936,12926534456353451220,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://bc1qcr8muz00d2v7uqg5ggulrmm.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://bc1qcr8muz00d2v7uqg5ggulrmm.com/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
bc1qcr8muz00d2v7uqg5ggulrmm.com	104.21.5.242	true	false	high
www.google.com	142.250.181.100	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD	false		high
https://a.nel.cloudflare.com/report/v4?s=nfu%2Btz1FRrtkYJxCnYs91R6UO1e2A4l5UhKKHlOQF%2BVSh8OaP%2F%2Bq9T4A27Hg43RZdYEsH3w3oBwS0L3Ll6HhGFDDl1a%2BVo%2BVc%2FFYCv9b0Tu9kTP9%2FK7Fc3ylfEZt2PhHBL61igyEidAbuMoyeV44DvQl	false		high
https://bc1qcr8muz00d2v7uqg5ggulrmm.com/	false		unknown
https://bc1qcr8muz00d2v7uqg5ggulrmm.com/favicon.ico	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.5.242	bc1qcr8muz00d2v7uqg5ggulrmm.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560412
Start date and time:	2024-11-21 19:26:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://bc1qcr8muz00d2v7uqg5ggulrmm.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@17/4@8/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.17.46, 74.125.205.84, 34.104.35.123, 93.184.221.240, 192.229.221.95, 172.217.17.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, otelrules.azureedge.net, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://bc1qcr8muz00d2v7uqg5ggulrmm.com

Input	Output
URL: http://bc1qcr8muz00d2v7uqg5ggulrmm.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false, "bitcoin_address_pattern": true }
URL: http://bc1qcr8muz00d2v7uqg5ggulrmm.com
URL: https://bc1qcr8muz00d2v7uqg5ggulrmm.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://bc1qcr8muz00d2v7uqg5ggulrmm.com/ Model: Joe Sandbox AI	{ "brands": [] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.82306798227366
Encrypted:	false
SSDEEP:	3:YBAvMFjJ4:YwMZJ4
MD5:	689525EE6C812E73A44B6AA1036AB53A
SHA1:	7350CB4703A96EA7C140BD30DA9A6D1BCFF36EB2
SHA-256:	37EC4665A8102D115FFD1AC20DAE94C98B4DAC64B0C1A68228AA2A531CAEB35D
SHA-512:	DA6DEFF19F0B2BF5E0EF17B3CAE34A0D44C5D48FBF9F3FFEDD00CEA74F923E1A3E9C4C926A6564C889CCA21041550F557E1EC00DB9E35502FFC794A5F9E9722E
Malicious:	false
Reputation:	low
URL:	https://bc1qcr8muz00d2v7uqg5ggulrmm.com/favicon.ico
Preview:	{"detail":"Not Found"}

Chrome Cache Entry: 41

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.82306798227366
Encrypted:	false
SSDEEP:	3:YBAvMFjJ4:YwMZJ4
MD5:	689525EE6C812E73A44B6AA1036AB53A
SHA1:	7350CB4703A96EA7C140BD30DA9A6D1BCFF36EB2
SHA-256:	37EC4665A8102D115FFD1AC20DAE94C98B4DAC64B0C1A68228AA2A531CAEB35D
SHA-512:	DA6DEFF19F0B2BF5E0EF17B3CAE34A0D44C5D48FBF9F3FFEDD00CEA74F923E1A3E9C4C926A6564C889CCA21041550F557E1EC00DB9E35502FFC794A5F9E9722E
Malicious:	false
Reputation:	low
URL:	https://bc1qcr8muz00d2v7uqg5ggulrmm.com/
Preview:	{"detail":"Not Found"}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 19:27:09.159065962 CET	49675	443	192.168.2.4	173.222.162.32
Nov 21, 2024 19:27:13.671528101 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:13.671614885 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:13.671708107 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:13.671999931 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:13.672049046 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.983511925 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.983778954 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.983839035 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.985342979 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.985414028 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.987437963 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.987497091 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.987551928 CET	443	49735	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.987557888 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.987607002 CET	49735	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.988291979 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.988360882 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:14.988440037 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.988661051 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:14.988706112 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.172240973 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:16.172338009 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:16.172431946 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:16.172621965 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:16.172658920 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:16.277467012 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.277952909 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.277981043 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.279644966 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.279755116 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.284876108 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.284972906 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.285115004 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.331357002 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.333725929 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.333762884 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.379730940 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.491254091 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:16.491286993 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:16.491374016 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:16.493016005 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:16.493027925 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:16.943553925 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.943743944 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:16.944041967 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.951705933 CET	49738	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:16.951755047 CET	443	49738	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:17.040651083 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:17.040750980 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:17.040848017 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:17.041162014 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:17.041196108 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:17.089248896 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:17.089283943 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:17.089354038 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:17.090461969 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:17.090477943 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:17.874557972 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:17.874789953 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:17.874806881 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:17.876492023 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:17.876563072 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:17.877823114 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:17.877907991 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:17.923559904 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:17.923572063 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:17.970441103 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:17.973810911 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:17.973885059 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:17.977780104 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:17.977787971 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:17.978193045 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.017321110 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.029192924 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.071362972 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.304182053 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.304543018 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.304564953 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.305545092 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.305603027 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.310132027 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.310218096 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.310504913 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.310513973 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.352119923 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.374567986 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.379004002 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.379067898 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.380573988 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.380904913 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381278992 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381279945 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381405115 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.381445885 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381692886 CET	443	49741	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.381731987 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381795883 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.381822109 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.381822109 CET	49741	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.382627964 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.385041952 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:18.385068893 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:18.508559942 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.508642912 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.512784004 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.512784004 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.514631987 CET	49740	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.514647007 CET	443	49740	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.599555969 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.599636078 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.599816084 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.600055933 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:18.600074053 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:18.767044067 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.767131090 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.768090010 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768101931 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768110991 CET	443	49742	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.768155098 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768192053 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:18.768223047 CET	49742	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768284082 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768490076 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:18.768526077 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:19.785120964 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:19.785443068 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:19.785511971 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:19.786627054 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:19.787020922 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:19.787168026 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:19.787208080 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:19.829401970 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:20.070017099 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.070461988 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:20.070528984 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.070885897 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.071295977 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:20.071372986 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.071485043 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:20.072232008 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.072312117 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.073765993 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.073798895 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.074110985 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.075597048 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.115324020 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.119374037 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.550600052 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.550688982 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.550791979 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:20.550971985 CET	49745	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:27:20.551016092 CET	443	49745	35.190.80.1	192.168.2.4
Nov 21, 2024 19:27:20.610546112 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.610631943 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.610718966 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.612519979 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.612572908 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.612601995 CET	49744	443	192.168.2.4	23.218.208.109
Nov 21, 2024 19:27:20.612620115 CET	443	49744	23.218.208.109	192.168.2.4
Nov 21, 2024 19:27:20.679676056 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:20.679848909 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:20.679919958 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:20.680850029 CET	49743	443	192.168.2.4	104.21.5.242
Nov 21, 2024 19:27:20.680902004 CET	443	49743	104.21.5.242	192.168.2.4
Nov 21, 2024 19:27:22.933497906 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:22.933537006 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:22.933698893 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:22.934761047 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:22.934773922 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:24.717417955 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:24.717529058 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:24.720112085 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:24.720122099 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:24.720431089 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:24.767627954 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:26.380713940 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:26.397377014 CET	49723	80	192.168.2.4	199.232.214.172
Nov 21, 2024 19:27:26.423351049 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.522093058 CET	80	49723	199.232.214.172	192.168.2.4
Nov 21, 2024 19:27:26.522155046 CET	49723	80	192.168.2.4	199.232.214.172
Nov 21, 2024 19:27:26.975090027 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975125074 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975135088 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975152969 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975179911 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:26.975209951 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975223064 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:26.975231886 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:26.975255013 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:26.975266933 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:27.002896070 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:27.002969980 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:27.002979040 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:27.003000021 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:27.003046036 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:27.636073112 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:27.636143923 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:27.636198997 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:27.973304987 CET	49739	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:27:27.973345041 CET	443	49739	142.250.181.100	192.168.2.4
Nov 21, 2024 19:27:28.366034031 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:28.366055012 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:27:28.366067886 CET	49746	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:27:28.366074085 CET	443	49746	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:00.786113977 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:00.786155939 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:00.786242008 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:00.786570072 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:00.786586046 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:02.552799940 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:02.552875042 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:02.556533098 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:02.556549072 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:02.556853056 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:02.565026999 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:02.607331038 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.030688047 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.030723095 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.030740023 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.030805111 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.030841112 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.030857086 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.030893087 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.202018976 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.202079058 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.202152014 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.202183008 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.202287912 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.247194052 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.247275114 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.247356892 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.247368097 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.247476101 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.374196053 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.374221087 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.374310017 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.374321938 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.374373913 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.407331944 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.407418013 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.407547951 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.407557964 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.407636881 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.432071924 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.432156086 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.432389021 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.432424068 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.432446003 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.432502031 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.451160908 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.451230049 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.451358080 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.451390982 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.451438904 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.562938929 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.563014030 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.563148022 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.563178062 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.563287973 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.582216024 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.582237959 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.582319021 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.582350016 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.582398891 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.601722002 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.601793051 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.601876020 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.601885080 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.601958036 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.620099068 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.620127916 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.620198965 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.620242119 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.620264053 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.620284081 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.634860039 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.634880066 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.634955883 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.634988070 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.635034084 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.650985956 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.651058912 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.651161909 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.651170015 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.651283026 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.658324957 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.658454895 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.658463001 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.658529997 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.658552885 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.658673048 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.658911943 CET	49752	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.658925056 CET	443	49752	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.725166082 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.725253105 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.725341082 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.726027966 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.726068974 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.726139069 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.726950884 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.726974010 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.727037907 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.727215052 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.727264881 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.727286100 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.727303982 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.728092909 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.728137016 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.728188992 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.728297949 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.728311062 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.728496075 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.728519917 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.729171038 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.729212046 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:03.729285002 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.729388952 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:03.729404926 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:04.786030054 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:04.786077976 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:04.786148071 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:04.786461115 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:04.786473989 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:05.441839933 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.442323923 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.442353964 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.442802906 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.442809105 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.444578886 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.444850922 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.444941044 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.445193052 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.445207119 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.515738964 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.516268015 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.516290903 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.516644955 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.516649961 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.590570927 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.591207981 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.591286898 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.591628075 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.591644049 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882390976 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882469893 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882623911 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882648945 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882688999 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882700920 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882714987 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882761955 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882771969 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882814884 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882843018 CET	49755	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882853985 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.882858992 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882858992 CET	443	49755	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.882879019 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.883012056 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.883038044 CET	443	49754	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.883080959 CET	49754	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885375977 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885440111 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.885469913 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885528088 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885565996 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.885636091 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885690928 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885714054 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.885773897 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.885809898 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.963300943 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.963383913 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.963447094 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.963463068 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.963511944 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.963597059 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.963603020 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.963618994 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.963974953 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.964056969 CET	443	49756	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.964103937 CET	49756	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.965622902 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.965707064 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:05.965790033 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.965919971 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:05.965954065 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.049154043 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.049304962 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.049377918 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.049479008 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.049479008 CET	49753	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.049520969 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.049547911 CET	443	49753	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.051229954 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.051276922 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.051350117 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.051486015 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.051522970 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.401688099 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.402179956 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.402246952 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.402627945 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.402642012 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.491126060 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:06.491228104 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:06.492801905 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:06.492814064 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:06.493045092 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:06.501384974 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:06.543338060 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:06.841095924 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841116905 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841291904 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.841326952 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841592073 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.841628075 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841654062 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.841770887 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841794968 CET	443	49757	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.841847897 CET	49757	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.844500065 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.844578028 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:06.844666004 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.844799042 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:06.844834089 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.175653934 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.175684929 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.175704002 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.175746918 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.175762892 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.175802946 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.175829887 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.219305038 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.219357014 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.219403982 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.219409943 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.219471931 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.219630003 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.219645023 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.219655991 CET	49758	443	192.168.2.4	172.202.163.200
Nov 21, 2024 19:28:07.219661951 CET	443	49758	172.202.163.200	192.168.2.4
Nov 21, 2024 19:28:07.666565895 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.667232037 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.667263985 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.667763948 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.667772055 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.735838890 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.736457109 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.736489058 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.736881018 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.736893892 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.739281893 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.739672899 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.739722013 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.740431070 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.740443945 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.835943937 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.836549997 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.836606026 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:07.836971045 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:07.836985111 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.114144087 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.114196062 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.114363909 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.114434958 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.114476919 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.114504099 CET	49760	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.114518881 CET	443	49760	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.117083073 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.117120981 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.117252111 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.117376089 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.117388964 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.171996117 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.172158957 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.172236919 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.172352076 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.172396898 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.172434092 CET	49761	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.172451019 CET	443	49761	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.174637079 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.174722910 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.174808979 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.174916029 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.174947977 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.193751097 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.193818092 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.193887949 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.196254969 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.196297884 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.196326971 CET	49759	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.196343899 CET	443	49759	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.198777914 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.198808908 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.198908091 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.199043989 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.199057102 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.299205065 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.299376011 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.299452066 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.299542904 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.299571037 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.299602032 CET	49762	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.299616098 CET	443	49762	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.301882982 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.301914930 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.302005053 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.302120924 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.302134037 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.626044035 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.626754045 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.626832008 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:08.627240896 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:08.627254963 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.073801041 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.073860884 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.073936939 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.074119091 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.074119091 CET	49763	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.074174881 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.074204922 CET	443	49763	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.077124119 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.077151060 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.077234983 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.077383995 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.077398062 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.834992886 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.835653067 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.835670948 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.836231947 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.836237907 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.959521055 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.960144043 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.960237026 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:09.960609913 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:09.960629940 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.017874002 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.018364906 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.018387079 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.018955946 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.018966913 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.051842928 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.052264929 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.052283049 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.052875042 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.052880049 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.271446943 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.271517992 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.271563053 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.271708012 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.271732092 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.271744967 CET	49764	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.271753073 CET	443	49764	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.274611950 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.274701118 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.274782896 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.274935007 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.274971008 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.418878078 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.419003010 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.419080019 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.419209957 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.419246912 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.419280052 CET	49765	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.419294119 CET	443	49765	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.421852112 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.421876907 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.421942949 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.422168970 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.422183990 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.455751896 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.455852032 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.455900908 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.455993891 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.456016064 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.456039906 CET	49767	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.456052065 CET	443	49767	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.458231926 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.458251953 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.458308935 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.458446026 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.458461046 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.512607098 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.512666941 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.512712955 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.512851954 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.512868881 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.512881994 CET	49766	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.512888908 CET	443	49766	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.514733076 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.514760017 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.514807940 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.514950991 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.514964104 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.792957067 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.793643951 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.793668985 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:10.794195890 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:10.794203997 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.231070042 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.231129885 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.231179953 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.231373072 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.231388092 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.231403112 CET	49768	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.231409073 CET	443	49768	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.234313965 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.234399080 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:11.234494925 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.234652996 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:11.234687090 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.165805101 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.166337013 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.166399956 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.166740894 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.166758060 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.220063925 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.220655918 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.220671892 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.220906019 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.220911980 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.254122972 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.254475117 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.254487038 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.254829884 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.254834890 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.256134987 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.256438971 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.256475925 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.256794930 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.256807089 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.642298937 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.642370939 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.642535925 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.642750025 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.642750025 CET	49769	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.642786980 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.642812014 CET	443	49769	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.645282030 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.645368099 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.645463943 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.645601034 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.645634890 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.682723045 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.682887077 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.682965040 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.683232069 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.683232069 CET	49770	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.683245897 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.683254004 CET	443	49770	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.685976028 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.686043024 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.686145067 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.686319113 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.686352968 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.689696074 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.689780951 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.689841986 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.689944983 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.689963102 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.689973116 CET	49772	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.689980030 CET	443	49772	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.692683935 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.692698956 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.692768097 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.692888021 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.692899942 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.872764111 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.872953892 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.873132944 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.874728918 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.874728918 CET	49771	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.874771118 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.874802113 CET	443	49771	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.875893116 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.875936985 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.876019001 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.876148939 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.876178980 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.955200911 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.955602884 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.955636024 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:12.956022024 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:12.956037045 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.189544916 CET	49724	80	192.168.2.4	199.232.214.172
Nov 21, 2024 19:28:13.311690092 CET	80	49724	199.232.214.172	192.168.2.4
Nov 21, 2024 19:28:13.311778069 CET	49724	80	192.168.2.4	199.232.214.172
Nov 21, 2024 19:28:13.391911030 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.392007113 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.392056942 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.392242908 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.392242908 CET	49773	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.392281055 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.392306089 CET	443	49773	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.395265102 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.395293951 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:13.395359039 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.395562887 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:13.395574093 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.366585970 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.368233919 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.368294954 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.368722916 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.368742943 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.478238106 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.478805065 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.478833914 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.479264021 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.479270935 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.567629099 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.568017960 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.568068027 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.568408966 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.568422079 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.663952112 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.664383888 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.664421082 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.664783001 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.664797068 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.800856113 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.800987959 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.801111937 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.801218033 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.801218033 CET	49775	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.801260948 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.801290035 CET	443	49775	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.804332972 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.804418087 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:14.804722071 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.804722071 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:14.804811001 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.021157980 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.021310091 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.021413088 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.021542072 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.021588087 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.021616936 CET	49776	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.021634102 CET	443	49776	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.024902105 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.024940968 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.025031090 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.025268078 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.025285006 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.041213989 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.041299105 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.041379929 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.041486025 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.041507006 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.041520119 CET	49777	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.041527033 CET	443	49777	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.044131994 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.044219971 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.044317961 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.044456959 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.044492960 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.107793093 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.107959986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.108057022 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.108205080 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.108247042 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.108277082 CET	49778	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.108292103 CET	443	49778	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.111722946 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.111766100 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.111850977 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.112051964 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.112068892 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.238312006 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.238845110 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.238859892 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.239226103 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.239233017 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.692034960 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.692111969 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.692174911 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.692321062 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.692339897 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.692380905 CET	49779	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.692387104 CET	443	49779	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.695008993 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.695091963 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:15.695192099 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.695352077 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:15.695389986 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.033742905 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:16.033796072 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:16.033896923 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:16.034136057 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:16.034154892 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:16.622816086 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.623471975 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.623549938 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.624105930 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.624119997 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.920480967 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.921185970 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.921222925 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.921695948 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.921709061 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.921854019 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.922169924 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.922183037 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.922471046 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.922473907 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.955610991 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:16.955688000 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:16.955832958 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:16.956091881 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:16.956129074 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:16.992716074 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.993151903 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.993165016 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:16.993654966 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:16.993659973 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.075094938 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.075149059 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.075231075 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.075424910 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.075470924 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.075500011 CET	49780	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.075516939 CET	443	49780	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.078447104 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.078489065 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.078587055 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.078790903 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.078819990 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.376660109 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.376837969 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.376929045 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.377054930 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.377098083 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.377126932 CET	49782	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.377151012 CET	443	49782	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.380179882 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.380265951 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.380378962 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.380595922 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.380631924 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.387713909 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.387866020 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.387926102 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.387983084 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.388000011 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.388009071 CET	49781	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.388015985 CET	443	49781	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.390336990 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.390372992 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.390450001 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.390645027 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.390661001 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.415666103 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.416073084 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.416134119 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.416467905 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.416481972 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.451551914 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.451631069 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.451689005 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.451812983 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.451821089 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.451829910 CET	49783	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.451833963 CET	443	49783	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.454130888 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.454216003 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.454309940 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.454535007 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.454566002 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.727642059 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:17.728061914 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:17.728075027 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:17.728348017 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:17.728631973 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:17.728688002 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:17.782691002 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:17.851593018 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.851663113 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.851766109 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.852025986 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.852070093 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.852098942 CET	49784	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.852114916 CET	443	49784	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.855384111 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.855437994 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:17.855557919 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.855766058 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:17.855783939 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:18.280847073 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.281193972 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.281250954 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.282383919 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.282890081 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.283014059 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.283087015 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.329523087 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.763973951 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.764141083 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.764214993 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.764286995 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.764317036 CET	443	49786	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.764364004 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.764385939 CET	49786	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.764920950 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.764947891 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.765023947 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.765240908 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:18.765269995 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:18.810655117 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:18.811229944 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:18.811261892 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:18.811691046 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:18.811702013 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.171583891 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.172168970 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.172221899 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.172586918 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.172604084 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.190634012 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.191025972 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.191061020 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.191423893 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.191436052 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.254316092 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.254853964 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.254872084 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.255245924 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.255251884 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.267874956 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.267940998 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.268021107 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.268095016 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.268095016 CET	49787	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.268129110 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.268155098 CET	443	49787	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.271397114 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.271435976 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.271522999 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.271725893 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.271754980 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.622286081 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.622472048 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.622536898 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.622725964 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.622760057 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.622786999 CET	49788	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.622803926 CET	443	49788	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.624471903 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.624583006 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.624631882 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.624700069 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.624716997 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.624763966 CET	49790	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.624774933 CET	443	49790	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.626179934 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.626218081 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.626324892 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.626533985 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.626554966 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.627408981 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.627490997 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.627567053 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.627674103 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.627701998 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.703644991 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.704061031 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.704077959 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.704505920 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.704510927 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.709784985 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.709943056 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.709996939 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.710015059 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.710030079 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.710038900 CET	49789	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.710043907 CET	443	49789	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.712713003 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.712758064 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:19.712830067 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.712944984 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:19.712973118 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.033328056 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.033670902 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.033716917 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.034846067 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.035161972 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.035276890 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.035293102 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.035377979 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.080030918 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.162501097 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.162576914 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.162638903 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.162825108 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.162839890 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.162852049 CET	49791	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.162857056 CET	443	49791	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.165800095 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.165819883 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.165899038 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.166105986 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:20.166117907 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:20.508054018 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.508239031 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:20.508326054 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.508742094 CET	49792	443	192.168.2.4	35.190.80.1
Nov 21, 2024 19:28:20.508780003 CET	443	49792	35.190.80.1	192.168.2.4
Nov 21, 2024 19:28:21.125407934 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.125947952 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.125996113 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.126420975 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.126435995 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.509823084 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.510387897 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.510420084 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.510839939 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.510852098 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.528378963 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.528697968 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.528728962 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.529062986 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.529071093 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.529489994 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.529723883 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.529753923 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.530039072 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.530045033 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.584323883 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.584383965 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.584523916 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.584757090 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.584757090 CET	49793	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.584794998 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.584816933 CET	443	49793	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.587275028 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.587394953 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.587506056 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.587616920 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.587652922 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.953073025 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.953229904 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.953299999 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.953396082 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.953411102 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.953423023 CET	49794	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.953428984 CET	443	49794	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.956681013 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.956723928 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.956825018 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.956995010 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.957010984 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.975524902 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.975706100 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.975788116 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.975862026 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.975903988 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.975933075 CET	49795	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.975948095 CET	443	49795	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.976627111 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.976706982 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.976764917 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.976840019 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.976840019 CET	49796	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.976869106 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.976892948 CET	443	49796	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.978678942 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.978779078 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.978880882 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.978985071 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.979024887 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.979053020 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.979078054 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.979089975 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:21.979285002 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:21.979304075 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.012854099 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.013288975 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.013309956 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.013844013 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.013848066 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.468761921 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.468831062 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.468878031 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.469022989 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.469038963 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.469048023 CET	49797	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.469053984 CET	443	49797	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.472199917 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.472255945 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:22.472342014 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.472532988 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:22.472562075 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.369040012 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.369514942 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.369573116 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.369987011 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.370001078 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.677885056 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.678425074 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.678442001 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.679049015 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.679053068 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.743520021 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.743926048 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.743953943 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.744469881 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.744477034 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.863946915 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.864372969 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.864433050 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:23.864903927 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:23.864918947 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.047766924 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.048291922 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.048386097 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.048464060 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.048502922 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.048559904 CET	49798	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.048577070 CET	443	49798	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.051378012 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.051398993 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.051467896 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.051595926 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.051604986 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.119659901 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.119833946 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.119918108 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.119951963 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.119966984 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.119976044 CET	49799	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.119981050 CET	443	49799	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.122555971 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.122639894 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.122740984 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.122891903 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.122927904 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.190732002 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.191180944 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.191209078 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.191767931 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.191787958 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.196326971 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.196403027 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.196526051 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.196548939 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.196557999 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.196576118 CET	49801	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.196579933 CET	443	49801	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.198673964 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.198708057 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.198770046 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.198872089 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.198882103 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.318334103 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.318523884 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.318588972 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.318639994 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.318640947 CET	49800	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.318674088 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.318696976 CET	443	49800	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.321386099 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.321428061 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.321520090 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.321661949 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.321703911 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.625282049 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.625350952 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.625474930 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.625686884 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.625686884 CET	49802	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.625713110 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.625735998 CET	443	49802	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.628685951 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.628712893 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:24.628781080 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.628909111 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:24.628921986 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.855536938 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.856019020 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.856095076 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.856632948 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.856650114 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.904166937 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.904599905 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.904624939 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.905302048 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.905307055 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.930047989 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.930481911 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.930490971 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:25.931143999 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:25.931148052 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.118457079 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.118943930 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.119019032 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.119708061 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.119725943 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.308461905 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.308554888 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.308599949 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.308830976 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.308851957 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.308866024 CET	49804	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.308871984 CET	443	49804	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.311800957 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.311826944 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.311889887 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.312012911 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.312020063 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.367775917 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.367860079 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.367902040 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.368060112 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.368078947 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.368088007 CET	49805	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.368093014 CET	443	49805	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.370857954 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.370917082 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.370986938 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.371112108 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.371162891 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.375994921 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.376056910 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.376096010 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.376198053 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.376205921 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.376214981 CET	49803	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.376219034 CET	443	49803	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.380536079 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.380543947 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.380611897 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.381036043 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.381046057 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.486074924 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.486736059 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.486752987 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.486949921 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.486953974 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.568108082 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.568269014 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.568413019 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.568413019 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.570746899 CET	49806	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.570775032 CET	443	49806	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.570970058 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.571057081 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.571266890 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.571266890 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.571342945 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.938750029 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.938836098 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.939240932 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.939240932 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.939240932 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.941915035 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.941943884 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:26.942131996 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.942131996 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:26.942156076 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:27.252465010 CET	49807	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:27.252484083 CET	443	49807	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:27.426270962 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:27.426342010 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:27.426573038 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:27.972589970 CET	49785	443	192.168.2.4	142.250.181.100
Nov 21, 2024 19:28:27.972609043 CET	443	49785	142.250.181.100	192.168.2.4
Nov 21, 2024 19:28:28.108680010 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.109204054 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.109220028 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.109687090 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.109693050 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.156963110 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.157567024 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.157592058 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.158013105 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.158020020 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.255908012 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.256294012 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.256302118 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.256711960 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.256717920 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.358632088 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.359004974 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.359026909 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.359391928 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.359397888 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.554395914 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.554601908 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.554672956 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.554739952 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.554747105 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.554757118 CET	49808	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.554760933 CET	443	49808	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.557605028 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.557670116 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.557770014 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.557934999 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.557966948 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.630225897 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.630379915 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.630449057 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.634391069 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.634423018 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.634449005 CET	49809	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.634464025 CET	443	49809	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.638726950 CET	49814	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.638762951 CET	443	49814	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.638837099 CET	49814	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.638943911 CET	49814	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.638959885 CET	443	49814	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.709647894 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.709724903 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.709770918 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.709908962 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.709929943 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.709945917 CET	49810	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.709956884 CET	443	49810	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.712161064 CET	49815	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.712234020 CET	443	49815	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.712297916 CET	49815	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.712470055 CET	49815	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.712501049 CET	443	49815	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.756447077 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.756768942 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.756779909 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.757174969 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.757179976 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.802690983 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.802875996 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.802941084 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.803002119 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.803002119 CET	49811	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.803024054 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.803045034 CET	443	49811	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.805218935 CET	49816	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.805322886 CET	443	49816	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:28.805402994 CET	49816	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.805562019 CET	49816	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:28.805593014 CET	443	49816	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.213591099 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.213679075 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.213725090 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.213852882 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.213871956 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.213881969 CET	49812	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.213886976 CET	443	49812	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.216154099 CET	49817	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.216257095 CET	443	49817	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:29.216346979 CET	49817	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.216454983 CET	49817	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:29.216490984 CET	443	49817	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.362279892 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.362756968 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.362812996 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.363219023 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.363234997 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.491560936 CET	443	49814	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.492021084 CET	49814	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.492036104 CET	443	49814	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.492482901 CET	49814	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.492486954 CET	443	49814	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.496175051 CET	443	49815	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.496505022 CET	49815	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.496532917 CET	443	49815	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.496841908 CET	49815	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.496854067 CET	443	49815	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.593313932 CET	443	49816	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.593790054 CET	49816	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.593873978 CET	443	49816	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.594563961 CET	49816	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.594578028 CET	443	49816	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.805700064 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.805861950 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.805922031 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.805969954 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.805989027 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.806000948 CET	49813	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.806008101 CET	443	49813	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.808562040 CET	49818	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.808638096 CET	443	49818	13.107.246.63	192.168.2.4
Nov 21, 2024 19:28:30.808712006 CET	49818	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.808826923 CET	49818	443	192.168.2.4	13.107.246.63
Nov 21, 2024 19:28:30.808846951 CET	443	49818	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2024 19:27:11.840358973 CET	53	49248	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:11.886138916 CET	53	51824	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:13.099908113 CET	53836	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:13.100027084 CET	50224	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:13.366117954 CET	53	50224	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:13.366776943 CET	53	53836	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:13.528062105 CET	56080	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:13.530391932 CET	58682	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:13.669239044 CET	53	56080	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:13.671004057 CET	53	58682	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:14.653554916 CET	53	64838	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:16.029141903 CET	59230	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:16.029278994 CET	60645	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:16.171266079 CET	53	59230	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:16.171310902 CET	53	60645	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:16.950403929 CET	56693	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:16.950604916 CET	64284	53	192.168.2.4	1.1.1.1
Nov 21, 2024 19:27:17.088367939 CET	53	56693	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:17.088406086 CET	53	64284	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:24.757915974 CET	138	138	192.168.2.4	192.168.2.255
Nov 21, 2024 19:27:31.706160069 CET	53	61223	1.1.1.1	192.168.2.4
Nov 21, 2024 19:27:50.454720974 CET	53	57948	1.1.1.1	192.168.2.4
Nov 21, 2024 19:28:11.470613956 CET	53	52178	1.1.1.1	192.168.2.4
Nov 21, 2024 19:28:13.409214020 CET	53	57844	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2024 19:27:13.099908113 CET	192.168.2.4	1.1.1.1	0x9eb1	Standard query (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.100027084 CET	192.168.2.4	1.1.1.1	0xf07d	Standard query (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	65	IN (0x0001)	false
Nov 21, 2024 19:27:13.528062105 CET	192.168.2.4	1.1.1.1	0xb2f9	Standard query (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.530391932 CET	192.168.2.4	1.1.1.1	0x37ec	Standard query (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	65	IN (0x0001)	false
Nov 21, 2024 19:27:16.029141903 CET	192.168.2.4	1.1.1.1	0x579a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:16.029278994 CET	192.168.2.4	1.1.1.1	0x67e4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 19:27:16.950403929 CET	192.168.2.4	1.1.1.1	0xf127	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:16.950604916 CET	192.168.2.4	1.1.1.1	0x2bcf	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 21, 2024 19:27:13.366117954 CET	1.1.1.1	192.168.2.4	0xf07d	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com		65	IN (0x0001)	false
Nov 21, 2024 19:27:13.366776943 CET	1.1.1.1	192.168.2.4	0x9eb1	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	104.21.5.242	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.366776943 CET	1.1.1.1	192.168.2.4	0x9eb1	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	172.67.134.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.669239044 CET	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	104.21.5.242	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.669239044 CET	1.1.1.1	192.168.2.4	0xb2f9	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com	172.67.134.10	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:13.671004057 CET	1.1.1.1	192.168.2.4	0x37ec	No error (0)	bc1qcr8muz00d2v7uqg5ggulrmm.com		65	IN (0x0001)	false
Nov 21, 2024 19:27:16.171266079 CET	1.1.1.1	192.168.2.4	0x579a	No error (0)	www.google.com	142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 21, 2024 19:27:16.171310902 CET	1.1.1.1	192.168.2.4	0x67e4	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 21, 2024 19:27:17.088367939 CET	1.1.1.1	192.168.2.4	0xf127	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

bc1qcr8muz00d2v7uqg5ggulrmm.com

https:

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	104.21.5.242	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:16 UTC	674	OUT	GET / HTTP/1.1 Host: bc1qcr8muz00d2v7uqg5ggulrmm.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:27:16 UTC	772	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Nov 2024 18:27:16 GMT Content-Type: application/json Content-Length: 22 Connection: close cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e62bb9c7d1b0dc7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1800&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2883&recv_bytes=1252&delivery_rate=1615938&cwnd=224&unsent_bytes=0&cid=bb6d63e75a7e49b0&ts=684&x=0"
2024-11-21 18:27:16 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:27:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF57) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=166648 Date: Thu, 21 Nov 2024 18:27:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	35.190.80.1	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:18 UTC	570	OUT	OPTIONS /report/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bc1qcr8muz00d2v7uqg5ggulrmm.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:27:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 21 Nov 2024 18:27:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	104.21.5.242	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:19 UTC	618	OUT	GET /favicon.ico HTTP/1.1 Host: bc1qcr8muz00d2v7uqg5ggulrmm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bc1qcr8muz00d2v7uqg5ggulrmm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:27:20 UTC	807	IN	HTTP/1.1 404 Not Found Date: Thu, 21 Nov 2024 18:27:20 GMT Content-Type: application/json Content-Length: 22 Connection: close Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfu%2Btz1FRrtkYJxCnYs91R6UO1e2A4l5UhKKHlOQF%2BVSh8OaP%2F%2Bq9T4A27Hg43RZdYEsH3w3oBwS0L3Ll6HhGFDDl1a%2BVo%2BVc%2FFYCv9b0Tu9kTP9%2FK7Fc3ylfEZt2PhHBL61igyEidAbuMoyeV44DvQl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e62bbb2afa3b9d3-SEA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=69538&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2883&recv_bytes=1196&delivery_rate=42023&cwnd=32&unsent_bytes=0&cid=c0a25552cceb6e14&ts=906&x=0"
2024-11-21 18:27:20 UTC	22	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"detail":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	35.190.80.1	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:20 UTC	496	OUT	POST /report/v4?s=LEhXl1T00juhQr084sTm7eO4P%2Bh7zk%2BO9HoOsP1RfN6WHcIKGdFbYkZNAyq51Q9c5vekna9e9tH5nWr2dFDk%2B6DsdKy6S0WYH8hFNbqv1GVoLHpy7SYWAcydaoGnQsuSl1wTpgSfpeq6nRlYf31FVPiD HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 401 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:27:20 UTC	401	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 34 31 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 2e 32 34 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 31 71 63 72 38 6d 75 7a 30 30 64 32 76 37 Data Ascii: [{"age":1,"body":{"elapsed_time":3416,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.5.242","status_code":404,"type":"http.error"},"type":"network-error","url":"https://bc1qcr8muz00d2v7
2024-11-21 18:27:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 21 Nov 2024 18:27:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 18:27:20 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=166702 Date: Thu, 21 Nov 2024 18:27:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-21 18:27:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:27:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6Dt6hyd3Bg2bXU+&MD=m2KERK9R HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:27:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6c35ae22-f9c8-483a-b743-57f43fea9ffc MS-RequestId: ee55bf7c-9bf0-4ab0-8eac-3118db76ac62 MS-CV: v29M+QCBDk2DeakC.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:27:26 GMT Connection: close Content-Length: 24490
2024-11-21 18:27:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-21 18:27:26 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:02 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:03 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 16:37:24 GMT ETag: "0x8DD08B87243495C" x-ms-request-id: b5254561-a01e-0070-0158-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182802Z-r1d97b99577dd2gchC1TEBz5ys0000000akg00000000a95t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:03 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-21 18:28:03 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:05 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:05 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: d37f37b1-d01e-002b-586c-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182805Z-1777c6cb754dqb2khC1TEBmk1s0000000bgg000000004qd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:05 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:05 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:05 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182805Z-178bfbc474bnwsh4hC1NYC2ubs00000001xg00000000dd5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:05 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:05 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:05 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:05 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182805Z-r1d97b9957744xz5hC1TEB5bf80000000afg00000000ttxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:05 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:05 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:05 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182805Z-1777c6cb754xjpthhC1TEBexs80000000bbg000000007k8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:06 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:06 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:06 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:06 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182806Z-178bfbc474bwlrhlhC1NYCy3kg00000001rg00000000zt67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:06 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:06 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6Dt6hyd3Bg2bXU+&MD=m2KERK9R HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 18:28:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 44d38a95-bae1-4d31-9728-9abf475550a1 MS-RequestId: 644f9dfa-d66e-4525-988a-f6f6bbaaf396 MS-CV: CxFy/Dfe+0ChRnNH.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 18:28:05 GMT Connection: close Content-Length: 30005
2024-11-21 18:28:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-21 18:28:07 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:07 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182807Z-178bfbc474bwh9gmhC1NYCy3rs00000001vg00000000ruxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:07 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:08 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 17c3c293-501e-00a3-6567-3bc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182808Z-178bfbc474bp8mkvhC1NYCzqnn00000001kg00000000zea9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:07 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 30601852-401e-0047-7476-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182808Z-1777c6cb754mqztshC1TEB4mkc0000000bd000000000rm4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:07 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:08 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: b54876a2-a01e-0070-6764-3b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182808Z-178bfbc474bxkclvhC1NYC69g400000001rg00000000pduk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:08 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:08 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:08 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: de6003cd-b01e-0098-493c-3ccead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182808Z-178bfbc474bq2pr7hC1NYCkfgg000000022g0000000036km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:28:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:09 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:10 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182810Z-1777c6cb7544n7p6hC1TEBph9800000000h000000000fpeq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:28:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:09 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4e7b5ce8-701e-0098-117a-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182810Z-178bfbc474bh5zbqhC1NYCkdug00000001r000000000q87s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 0176f65f-901e-007b-6aca-3bac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182810Z-r1d97b9957747b9jhC1TEBgyec0000000atg00000000fuat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182810Z-178bfbc474bh5zbqhC1NYCkdug00000001t000000000dtpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:10 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: f9adfbee-d01e-0028-5ea6-3b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182811Z-r1d97b99577dd2gchC1TEBz5ys0000000ae000000000tc9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:12 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 835fb09e-e01e-0003-07ce-3b0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182812Z-r1d97b9957744xz5hC1TEB5bf80000000aqg000000003597 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:12 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7fd471a5-f01e-00aa-27bf-3b8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182812Z-r1d97b99577dd2gchC1TEBz5ys0000000amg000000006qc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:28:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:12 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:12 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 918e3103-701e-0097-4a7c-3bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182812Z-1777c6cb754ww792hC1TEBzqu40000000ba000000000d5cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:12 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:12 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:12 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182812Z-1777c6cb7544n7p6hC1TEBph9800000000gg00000000gac9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:12 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:13 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 8b710333-301e-0020-767a-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182813Z-178bfbc474bgvl54hC1NYCsfuw00000001t000000000qbec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:13 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:14 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 8731842e-101e-008e-41de-3bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182814Z-r1d97b995774n5h6hC1TEBvf840000000an000000000m1xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:14 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:14 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182814Z-178bfbc474bv587zhC1NYCny5w00000001kg0000000132rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:14 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182814Z-178bfbc474bvjk8shC1NYC83ns00000001sg000000004nu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:14 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 20c6f849-701e-005c-2e61-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182814Z-178bfbc474bgvl54hC1NYCsfuw00000001wg000000006r1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:15 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:15 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 5bcf05b2-a01e-006f-6e7a-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182815Z-1777c6cb754b7tdghC1TEBwwa40000000bkg00000000f9p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:15 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:16 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8157cc8d-f01e-0003-1961-3b4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182816Z-178bfbc474bwh9gmhC1NYCy3rs000000020g000000001kvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:17 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:16 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a24720e5-f01e-0096-3f65-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182817Z-178bfbc474bv7whqhC1NYC1fg400000001s000000000vyfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:16 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182817Z-178bfbc474bpnd5vhC1NYC4vr400000001qg0000000135be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:16 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182817Z-178bfbc474bscnbchC1NYCe7eg000000021g000000008x24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:17 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182817Z-1777c6cb754mrj2shC1TEB6k7w0000000bhg00000000nk0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49786	35.190.80.1	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:18 UTC	580	OUT	OPTIONS /report/v4?s=nfu%2Btz1FRrtkYJxCnYs91R6UO1e2A4l5UhKKHlOQF%2BVSh8OaP%2F%2Bq9T4A27Hg43RZdYEsH3w3oBwS0L3Ll6HhGFDDl1a%2BVo%2BVc%2FFYCv9b0Tu9kTP9%2FK7Fc3ylfEZt2PhHBL61igyEidAbuMoyeV44DvQl HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bc1qcr8muz00d2v7uqg5ggulrmm.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:28:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 21 Nov 2024 18:28:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:18 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182819Z-178bfbc474bpnd5vhC1NYC4vr400000001s000000000va6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:19 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 76e93f39-101e-0034-5559-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182819Z-178bfbc474bnwsh4hC1NYC2ubs00000001yg000000009uw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182819Z-178bfbc474btvfdfhC1NYCa2en00000001y000000000c5w9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:19 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182819Z-1777c6cb754gvvgfhC1TEBz4rg0000000bgg00000000exek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182819Z-1777c6cb754xlpjshC1TEBv8cc0000000bgg00000000smzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49792	35.190.80.1	443	3156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:20 UTC	506	OUT	POST /report/v4?s=nfu%2Btz1FRrtkYJxCnYs91R6UO1e2A4l5UhKKHlOQF%2BVSh8OaP%2F%2Bq9T4A27Hg43RZdYEsH3w3oBwS0L3Ll6HhGFDDl1a%2BVo%2BVc%2FFYCv9b0Tu9kTP9%2FK7Fc3ylfEZt2PhHBL61igyEidAbuMoyeV44DvQl HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 456 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 18:28:20 UTC	456	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 36 32 37 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 36 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 31 71 63 72 38 6d 75 7a 30 30 64 32 76 37 75 71 67 35 67 67 75 6c 72 6d 6d 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 2e 32 34 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 Data Ascii: [{"age":56274,"body":{"elapsed_time":3641,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://bc1qcr8muz00d2v7uqg5ggulrmm.com/","sampling_fraction":1.0,"server_ip":"104.21.5.242","status_code":404,"type":"http.error"},"type":"ne
2024-11-21 18:28:20 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 21 Nov 2024 18:28:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:21 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:21 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9f194ed4-601e-0070-357c-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182821Z-1777c6cb7544nvmshC1TEBf7qc0000000b6g00000000q3sf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: d277967d-801e-0047-0163-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182821Z-178bfbc474b9fdhphC1NYCac0n00000001t000000000e2uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 792329fd-401e-0035-1f6c-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182821Z-178bfbc474bfw4gbhC1NYCunf400000001yg00000000076u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182821Z-r1d97b995778dpcthC1TEB4b540000000ang00000000auaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:22 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182822Z-1777c6cb754dqf99hC1TEB5nps0000000be00000000007q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182823Z-1777c6cb754vxwc9hC1TEBykgw0000000bh00000000062ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:24 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182823Z-r1d97b99577ckpmjhC1TEBrzs00000000as000000000c1dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:23 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182824Z-178bfbc474bpnd5vhC1NYC4vr400000001s000000000vam7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:28:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:24 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182824Z-178bfbc474bbbqrhhC1NYCvw74000000020000000000e744 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:24 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5ac7c1c0-801e-0083-5da5-3bf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182824Z-r1d97b99577dd2gchC1TEBz5ys0000000am000000000809f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:25 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:26 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182826Z-1777c6cb754b7tdghC1TEBwwa40000000bg000000000rzd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:26 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:25 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcdc764c-f01e-0052-4963-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182826Z-178bfbc474bp8mkvhC1NYCzqnn00000001hg000000015h3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:25 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:26 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 5cb5275b-201e-0033-36eb-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182826Z-r1d97b99577hc74hhC1TEBvbns0000000agg00000000hfum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:26 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:26 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182826Z-178bfbc474bq2pr7hC1NYCkfgg000000020g00000000b2f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:26 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182826Z-178bfbc474bh5zbqhC1NYCkdug00000001v00000000059qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182828Z-1777c6cb754xrr98hC1TEB3kag0000000bag00000000eh0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 83e3c789-401e-00a3-649b-3b8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182828Z-r1d97b99577n5jhbhC1TEB74vn0000000as00000000078ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:28 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 30ed5e4a-c01e-000b-11b8-3be255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182828Z-r1d97b99577ckpmjhC1TEBrzs00000000arg00000000dydu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:28 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8ce121a2-801e-0035-3fd5-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182828Z-r1d97b99577n5jhbhC1TEB74vn0000000aq000000000d29u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:28 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182829Z-1777c6cb7544nvmshC1TEBf7qc0000000bb000000000738d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:30 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:30 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182830Z-1777c6cb754lvj6mhC1TEBke940000000bfg00000000gqt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-21 18:28:30 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:30 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:30 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182830Z-178bfbc474bq2pr7hC1NYCkfgg000000020g00000000b2sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:30 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:30 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:30 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c9d6026a-001e-0014-11f3-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182830Z-r1d97b99577jlrkbhC1TEBq8d00000000agg00000000p285 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:30 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:30 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2deeee2f-b01e-001e-4967-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182830Z-178bfbc474brk967hC1NYCfu6000000001qg0000000076cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:31 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-21 18:28:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 18:28:31 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241121T182831Z-1777c6cb754dqb2khC1TEBmk1s0000000bag00000000tetp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-21 18:28:31 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:32 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:32 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 18:28:32 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	13:27:04
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:27:10
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2208,i,6040105471244609936,12926534456353451220,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:27:12
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bc1qcr8muz00d2v7uqg5ggulrmm.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.63

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: bc1qcr8muz00d2v7uqg5ggulrmm.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bc1qcr8muz00d2v7uqg5ggulrmm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bc1qcr8muz00d2v7uqg5ggulrmm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6Dt6hyd3Bg2bXU+&MD=m2KERK9R HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6Dt6hyd3Bg2bXU+&MD=m2KERK9R HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: bc1qcr8muz00d2v7uqg5ggulrmm.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://bc1qcr8muz00d2v7uqg5ggulrmm.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 40

Chrome Cache Entry: 41

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2924, Parent PID: 3868

General

Chronological Activities

Analysis Process: chrome.exePID: 3156, Parent PID: 2924

General

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 3868

General

Chronological Activities

Disassembly

Windows Analysis Report
http://bc1qcr8muz00d2v7uqg5ggulrmm.com