Edit tour

Windows Analysis Report
HOLT EXPERIMENTAL_07710714-20241025.xlsx

Overview

General Information

Sample name:	HOLT EXPERIMENTAL_07710714-20241025.xlsx
Analysis ID:	1560599
MD5:	2f6edd1c6196833dafc24d06741ce583
SHA1:	bea278d8b768cda554fdb409432201f38a347a25
SHA256:	97a126a208d44d69d6a839e9aa5e2a9fb2794a364967268a68573a5115d0bd41
Infos:

Detection

Score:	4
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 7436 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 8080 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

splwow64.exe (PID: 8156 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

cleanup

Sigma Signatures

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.246.63, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7436, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49778

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.4, DestinationIsIpv6: false, DestinationPort: 49778, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 7436, Protocol: tcp, SourceIp: 13.107.246.63, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:29:10.453948+0100	2028371	3	Unknown Traffic	192.168.2.4	49778	13.107.246.63	443	TCP
2024-11-22T01:29:18.037384+0100	2028371	3	Unknown Traffic	192.168.2.4	49794	13.107.246.63	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49788 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49786 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49790 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49792 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49791 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49789 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49793 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49794 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49797 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49801 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49800 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49803 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49804 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49805 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49806 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49809 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49808 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49810 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49813 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49812 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49814 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49815 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49816 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49818 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49817 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49820 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49824 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49827 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49825 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49829 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49830 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49831 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49832 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49834 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49835 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49837 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49838 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49839 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49841 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49840 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49842 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49843 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49844 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49845 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49847 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49846 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49848 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49849 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49852 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49850 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49851 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49853 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49854 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49855 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49856 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49858 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49857 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49859 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49860 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49861 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49862 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49863 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49864 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49865 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49867 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49866 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49868 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49869 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49870 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49871 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49872 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49873 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49874 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49876 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49875 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49877 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49878 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49879 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49880 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49882 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49883 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49881 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49884 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49885 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49886 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49889 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49887 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49888 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49890 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49892 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49891 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49894 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49895 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49897 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49896 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49898 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49893 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49899 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49900 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49901 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49902 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49903 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49904 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49905 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49906 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49907 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49908 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49909 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49911 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49783 -> 13.107.246.63:443

Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49751
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49753
Source: global traffic	TCP traffic: 192.168.2.4:49753 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49756
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49757
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49754
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49755
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49761
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49762
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49770
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49771
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49772
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49778
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49778
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49773
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49775
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49776
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 13.107.246.63:443
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49777
Source: global traffic	TCP traffic: 13.107.246.63:443 -> 192.168.2.4:49774

Source: excel.exe

Memory has grown: Private usage: 2MB later: 77MB

Source: Joe Sandbox View

IP Address: 13.107.246.63 13.107.246.63

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49778 -> 13.107.246.63:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49794 -> 13.107.246.63:443

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD4157.0.dr

String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: classification engine

Classification label: clean4.winXLSX@5/4@0/1

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\Desktop\~$HOLT EXPERIMENTAL_07710714-20241025.xlsx

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{C7BE8500-CB3D-43D1-B93F-E1D837516A8F} - OProcSessId.dat

Jump to behavior

Source: HOLT EXPERIMENTAL_07710714-20241025.xlsx

OLE indicator, Workbook stream: true

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: HOLT EXPERIMENTAL_07710714-20241025.xlsx

Initial sample: OLE zip file path = xl/media/image1.png

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: HOLT EXPERIMENTAL_07710714-20241025.xlsx

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe

Window / User API: threadDelayed 856

Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Exploitation for Client Execution	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	1 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560599
Start date and time:	2024-11-22 01:27:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	HOLT EXPERIMENTAL_07710714-20241025.xlsx
Detection:	CLEAN
Classification:	clean4.winXLSX@5/4@0/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.109.89.19, 52.113.194.132, 184.28.90.27, 93.184.221.240, 52.182.143.214
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, weu-azsc-000.roaming.officeapps.live.com, eur.roaming1.live.com.akadns.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, wu.azureedge.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, osiprod-weu-buff-azsc-000.westeurope.cloudapp.azure.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, wu.ec.azureedge.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
19:29:01	API Interceptor	877x Sleep call for process: splwow64.exe modified

Input	Output
URL: Office document Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Office document Model: Joe Sandbox AI	{ "brands": [ "TForce Freight" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
13.107.246.63	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://app.smartsheet.com/b/form/9141bdd4d7da45789170a7064a677627	Get hash	malicious	HTMLPhisher	Browse
	http://clearview-ps.inwise.net/page_11-21-2024_1	Get hash	malicious	Unknown	Browse
	1732215862df90b858ebf82740ce134fb5917becbb3385f4dfc36cbe28d6e90709df01f065739.dat-decoded.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	https://app.smartsheet.com/b/form/9141bdd4d7da45789170a7064a677627	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://clearview-ps.inwise.net/page_11-21-2024_1	Get hash	malicious	Unknown	Browse	13.107.246.63
	1732215862df90b858ebf82740ce134fb5917becbb3385f4dfc36cbe28d6e90709df01f065739.dat-decoded.exe	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	mipsel.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	158.158.207.225
	arm5.nn-20241122-0008.elf	Get hash	malicious	Mirai, Okiru	Browse	22.124.77.226
	arm.nn-20241122-0008.elf	Get hash	malicious	Mirai, Okiru	Browse	22.120.92.122
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	52.168.117.168
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.247.23.33
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	https://doam29-kk5ug.ondigitalocean.app/	Get hash	malicious	TechSupportScam	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://amz-account-unlock-dashboard4.duckdns.org	Get hash	malicious	Unknown	Browse	13.107.246.63
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.63
	https://temp.farenheit.net/XMDNvVFp0d0NmOUNSbFJTSVB2QTRuZktxeWdPaG5ReWxrK1NleVgvbGgvakhBRU5TWkZPQW14RDZLMTlST0pJK3Jja1R0bjkyZkxubHc1UXhLdmU5UVNJcVIyU25JdFVIV0hEc3l3R0kvb3VpWWFlWGxvWmJMSDIwaWRkYTV3c2V3ZnpXcVArUkJXbEpTeWU1SCtuRWNpRVI2RFFuNXh1ODEyQUx3WlNCdDB1N3NjcDh2M1p4MU9qSkJ0R2VDV0VDeVJ4THU5bDM5SkkvaGMxc1hEc3pOb0VtcWl0cDUxemRyc1BwMkE9PS0tRklOcExLZUVZVVZGemhWRC0teTZKNGN1UnI2dUIxL3E5Zm91Q2hVZz09?cid=2268024206	Get hash	malicious	KnowBe4	Browse	13.107.246.63
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.63

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.4524374051068305
Encrypted:	false
SSDEEP:	6:kKkQ8RBMiJFN+SkQlPlEGYRMY9z+s3Ql2DUevat:8QaBckPlE99SCQl2DUevat
MD5:	EEFD4684F1CFF74BE021F853E12CBE02
SHA1:	6EE1E7CEE5BA058D06B15001C860EC85E8ECDCA6
SHA-256:	0D9DEAB96F07A3944051B66A7AEA4703E1394D5F4037857BB618E720D50D8BD8
SHA-512:	A9444D95BA429A54E8B36A97468523A668AF937A5FD21AC78061C35BD71A5961071347BB87D176CDD3C564456BF3891FAB89EE8247696CD2DD0C5A86E6522AE9
Malicious:	false
Reputation:	low
Preview:	p...... .........S.fu<..(...................................................@... .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DF79B100.png

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	PNG image data, 212 x 73, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10817
Entropy (8bit):	7.976759216562262
Encrypted:	false
SSDEEP:	192:eLr2gmmfsk6QW4UiBf5ejIrC6k8zK8UmFEX+fwwPsCEHTvdDys2Wfk:eL6fmnW4tBxejgCWUmyX+IA2zd8
MD5:	5C42737A7D3695AB92F2087D5DC24848
SHA1:	23C93025B74511C0FBAE862F25DA3B740F4F666A
SHA-256:	664B271E8568E1A47CBAEA193C76FDFC4A559FCC84E020D28F7F5C4D5D331C38
SHA-512:	4AA87AA0A119DE3DBFB100AD44A656881DA502291F55A33D594BA0CA427833D9A930982223A4DDCEBA07D4341DC963FAB9BD5EA32C4BA07A2383E217F231CD78
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.....E&......sRGB.........gAMA......a.....pHYs..........+....).IDATx^.].\|\U.?u.....D}">.EDekf.6tf..m..;...Ap...>..,...Z.%3s..$...E.iE....<...nI.&....;....M.N2m....}.Y.Y.s.UU..~.H.uI8.....pGM..kG.=..p....c.k....kC.K...]..[.B.?..E.........Z........bg8..3.Y.4...G...G.F.?v..7u.c........%.FG.y.f..+k..$...~hq}.{.f.\|.Kj.......?.]..LW.........F...6.5......u.%............o..}....m..u..}=.....p..;..C.!.i.L.. )..\..aLC_w(..7......6<.z...{.....4....u..Bc......l..Ta.A.Ro.f...p@wMtbWM.55.....)..S..F..SC`....;....m..-`.M..`v2?,....rF....Y...B..I.v.C.....n.kX...RGh...x....A..AX.....K...]Q......{.Q..[=.......z..f.b.../..c...0.'0.]kC...'L.."\..X(..X..T. 8X.....-...h....].fx.].....U..+.a.....u.X....\t....n..{..U(.X.w-.]...GG.ELr1.........t.E..GK#....!...2 =.y..c.o/..g>..G...e].<.BR(<...2..n$i..QiL..a.z.....x+,.+j".U........+.....uu...3.#.......Q0n/.....hk.C..CF'.....?..3......a+.nF.......V.........H.<>...z.y....p.E.].\|m]

C:\Users\user\Desktop\~$HOLT EXPERIMENTAL_07710714-20241025.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:KVC+cAmltV:KVC+cR
MD5:	9C7132B2A8CABF27097749F4D8447635
SHA1:	71D7F78718A7AFC3EAB22ED395321F6CBE2F9899
SHA-256:	7029AE5479F0CD98D892F570A22B2AE8302747DCFF3465B2DE64D974AE815A83
SHA-512:	333AC8A4987CC7DF5981AE81238A77D123996DB2C4C97053E8BD2048A64FDCF33E1245DEE6839358161F6B5EEA6BFD8D2358BC4A9188D786295C22F79E2D635E
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.user ..j.o.n.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.9044011179592175
TrID:	Excel Microsoft Office Open XML Format document (35004/1) 81.40% ZIP compressed archive (8000/1) 18.60%
File name:	HOLT EXPERIMENTAL_07710714-20241025.xlsx
File size:	20'157 bytes
MD5:	2f6edd1c6196833dafc24d06741ce583
SHA1:	bea278d8b768cda554fdb409432201f38a347a25
SHA256:	97a126a208d44d69d6a839e9aa5e2a9fb2794a364967268a68573a5115d0bd41
SHA512:	4d1df5e6412df776f0881584f97b5d3c040b661f0547379219eb6da59c0149359a8a389ec0a379c0aa7c3fbd978733fc8de9b30375448e96d4b0c2e00fc177bd
SSDEEP:	384:0L6fmnW4tBxejgCWUmyX+IA2zdWT/ETWzMGBLT9Vfz67OpJJhTy:o6fmW4tBxCgCWUmyX+IA2wiWRLT9JyoE
TLSH:	A392C0E27AFF8414D7466039824CB357426430D681CACBD73E84628A69F88944FBB96E
File Content Preview:	PK........M.tY................xl/media/image1.png.A*...PNG........IHDR.......I.....E&......sRGB.........gAMA......a.....pHYs..........+....).IDATx^.].\|\U.?u.....D}">.EDekf.6tf...m..;....Ap...>...,...Z.%3s..$....E.iE....<...nI.&.....;....M.N2m....}.Y.Y.s..

File Icon


Icon Hash:	35e58a8c0c8a85b9

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "HOLT EXPERIMENTAL_07710714-20241025.xlsx"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-22T01:29:10.453948+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49778	13.107.246.63	443	TCP
2024-11-22T01:29:18.037384+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49794	13.107.246.63	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 22, 2024 01:28:55.173860073 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:55.173947096 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:55.174042940 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:55.174463034 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:55.174499035 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.028923035 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.029019117 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.030371904 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.030404091 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.030749083 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.044009924 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.087361097 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.521789074 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.521848917 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.521892071 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.521914005 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.521967888 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.522005081 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.522027969 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.720386982 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.720416069 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.720458031 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.720491886 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.720534086 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.720556021 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.764267921 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.764290094 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.764355898 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.764375925 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.764435053 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.913592100 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.913650990 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.913676023 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.913703918 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.913731098 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.913753986 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.943718910 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.943783045 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.943799019 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.943814993 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.943845034 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.943864107 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.961297989 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.961359978 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.961395979 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.961411953 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.961471081 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.961471081 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.981228113 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.981277943 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.981329918 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.981343031 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:57.981370926 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:57.981395006 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.115670919 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.115715981 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.115756035 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.115823030 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.115861893 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.115886927 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.132884026 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.132927895 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.132980108 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.133009911 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.133037090 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.133099079 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.147483110 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.147524118 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.147562027 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.147593021 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.147623062 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.147640944 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.158806086 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.158845901 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.158891916 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.158905983 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.158932924 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.159267902 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.168628931 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.168668985 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.168709040 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.168723106 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.168752909 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.168862104 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.179116011 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.179160118 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.179202080 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.179214954 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.179246902 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.179267883 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.183881998 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.183957100 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.183971882 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.184001923 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.184014082 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.184040070 CET	49751	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.184045076 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.184072971 CET	443	49751	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.268115997 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.268218040 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.268367052 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.269922018 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.269943953 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.269944906 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.269993067 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.270016909 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.270037889 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.270183086 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.270196915 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271053076 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271147013 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271265984 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271392107 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271430969 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271639109 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271734953 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271814108 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271840096 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271850109 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271917105 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271940947 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:58.271975040 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:58.271994114 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:59.859527111 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:59.860060930 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:59.860124111 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:28:59.860564947 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:28:59.860579014 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.052954912 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.053708076 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.053740025 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.054202080 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.054210901 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.061934948 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.062540054 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.062597990 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.062889099 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.062901974 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.112539053 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.113646030 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.113704920 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.114007950 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.114023924 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.123076916 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.123405933 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.123466969 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.123753071 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.123764992 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.308614016 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.308690071 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.308774948 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.308804989 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.308868885 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.308973074 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.309004068 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.309046984 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.309398890 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.309484959 CET	443	49753	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.309564114 CET	49753	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.311398983 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.311482906 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.311557055 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.311682940 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.311716080 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501036882 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501065016 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501141071 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.501172066 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501450062 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.501450062 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.501487017 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501631021 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.501660109 CET	443	49756	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.503349066 CET	49756	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.504582882 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.504647017 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.505965948 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.506041050 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.506097078 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.506146908 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.506187916 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.506187916 CET	49757	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.506210089 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.506232977 CET	443	49757	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.508107901 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.508142948 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.526036024 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.526077986 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.526252985 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.526472092 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.526490927 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.572412968 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.572462082 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.572598934 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.572634935 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.572634935 CET	49754	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.572653055 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.572664022 CET	443	49754	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.574352980 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.574435949 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.574536085 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.574661970 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.574697018 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.580579042 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.580650091 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.580722094 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.580777884 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.580833912 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.580883026 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.580883026 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.580900908 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.581232071 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.581310987 CET	443	49755	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.582562923 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.582595110 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:00.582595110 CET	49755	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.582679987 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.582808018 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:00.582834005 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.162870884 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.163463116 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.163542032 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.163803101 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.163816929 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.267077923 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.267530918 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.267580986 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.267828941 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.267843008 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.290905952 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.291224957 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.291275024 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.291577101 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.291590929 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.391362906 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.391740084 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.391813040 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.392148018 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.392163038 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.435600042 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.436115980 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.436148882 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.436573982 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.436585903 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.615772009 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.615932941 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.615998030 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.617639065 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.617639065 CET	49758	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.617677927 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.617702007 CET	443	49758	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.620924950 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.621016979 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.621089935 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.621192932 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.621220112 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.702194929 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.702366114 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.702455997 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.706146955 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.706192970 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.706223011 CET	49760	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.706242085 CET	443	49760	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.710278034 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.710319042 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.710381985 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.710540056 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.710555077 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.780139923 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.780201912 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.780307055 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.780462027 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.780500889 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.780529976 CET	49759	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.780544996 CET	443	49759	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.782746077 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.782815933 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.783400059 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.783529997 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.783560991 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.836631060 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.836673021 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.836786985 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.837228060 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.837256908 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.837291002 CET	49761	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.837305069 CET	443	49761	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.840322018 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.840344906 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.840432882 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.840554953 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.840568066 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.903151035 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.903214931 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.903327942 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.903464079 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.903464079 CET	49762	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.903496027 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.903518915 CET	443	49762	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.905606985 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.905643940 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:02.905735016 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.905846119 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:02.905869961 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.410145998 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.410573959 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.410614014 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.411112070 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.411130905 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.561708927 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.562182903 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.562196970 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.562720060 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.562726974 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.564589977 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.564918041 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.564956903 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.565296888 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.565314054 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.682811022 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.683130980 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.683155060 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.683536053 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.683543921 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.711473942 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.711847067 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.711870909 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.712562084 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.712573051 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.855751991 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.855961084 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.856054068 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.856142044 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.856142044 CET	49763	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.856194019 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.856219053 CET	443	49763	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.859266996 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.859369993 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:04.859555006 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.860508919 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:04.860543966 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.013216019 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.013258934 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.013461113 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.013462067 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.013603926 CET	49765	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.013643026 CET	443	49765	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.013936043 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.014079094 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.015475988 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.015559912 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.015559912 CET	49764	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.015578985 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.015589952 CET	443	49764	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.015717983 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.015779018 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.015918016 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.016134977 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.016163111 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.017548084 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.017591000 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.017846107 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.017846107 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.017909050 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.137675047 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.137721062 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.137968063 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.137968063 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.138111115 CET	49766	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.138123989 CET	443	49766	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.140533924 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.140597105 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.140794992 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.140877008 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.140909910 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.157007933 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.157147884 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.157238960 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.157238960 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.157335997 CET	49767	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.157356977 CET	443	49767	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.159176111 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.159219027 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:05.159295082 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.159430027 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:05.159450054 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.667140007 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.667623043 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.667673111 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.668071032 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.668086052 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.803090096 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.803459883 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.803505898 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.803833008 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.803844929 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.812750101 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.813071966 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.813103914 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.813363075 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.813374996 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.863991976 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.864386082 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.864444971 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:06.864609957 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:06.864623070 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.009109974 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.009510994 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.009579897 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.009953976 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.009969950 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372416019 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372476101 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372488976 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372534037 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372647047 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372711897 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372802019 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372802019 CET	49769	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372838020 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372879982 CET	443	49769	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372888088 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372888088 CET	49768	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.372929096 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.372953892 CET	443	49768	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.373008013 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.373157024 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.373240948 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.373733044 CET	49770	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.373744965 CET	443	49770	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.376024008 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.376107931 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.376185894 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.376718044 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.376794100 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.376842022 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.376864910 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.376876116 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.377015114 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.377015114 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.377069950 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.377079010 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.377101898 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.377145052 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.377165079 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.567569017 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.568109035 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.568191051 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.569267988 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.569267988 CET	49771	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.569298983 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.569324017 CET	443	49771	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.572058916 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.572103977 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.572304010 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.572467089 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.572494984 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.706645966 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.706787109 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.706841946 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.707019091 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.707019091 CET	49772	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.707050085 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.707075119 CET	443	49772	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.710910082 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.710963011 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:07.711020947 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.711518049 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:07.711549997 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:08.642026901 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:08.642076969 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:08.642168999 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:08.642517090 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:08.642548084 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.222798109 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.223256111 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.223283052 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.223720074 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.223726988 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.259424925 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.259857893 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.259934902 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.260211945 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.260226965 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.261101007 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.261358976 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.261377096 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.261645079 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.261656046 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.429568052 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.430006981 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.430083036 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.430401087 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.430413008 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.566418886 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.566737890 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.566790104 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.567095995 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.567114115 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.676573992 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.676651001 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.676722050 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.676980972 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.676980972 CET	49774	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.677018881 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.677045107 CET	443	49774	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.679249048 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.679307938 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.679507017 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.679666996 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.679692984 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.703210115 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.703385115 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.703453064 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.703596115 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.703596115 CET	49773	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.703633070 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.703659058 CET	443	49773	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.704416037 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.704581022 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.704643965 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.707258940 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.707258940 CET	49775	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.707277060 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.707295895 CET	443	49775	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.709094048 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.709134102 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.709254026 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.709837914 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.709886074 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.709952116 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.709980011 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.709980965 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.710227966 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.710258007 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.919589043 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.919625998 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.919795036 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.919795990 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.921463013 CET	49776	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.921468973 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.921490908 CET	443	49776	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.921550989 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:09.921730042 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.921785116 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:09.921806097 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.036410093 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.036535025 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.036659956 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.036659956 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.036686897 CET	49777	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.036703110 CET	443	49777	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.039099932 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.039179087 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.039308071 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.039403915 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.039427042 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.453763008 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.453948021 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.454953909 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.454977036 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.456093073 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.464493990 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.507369041 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.943656921 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.943711042 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.943753004 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.943778992 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.943814039 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:10.943844080 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:10.943870068 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.131727934 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.131779909 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.131844044 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.131906986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.132014036 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.132036924 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.175929070 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.175973892 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.176115990 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.176137924 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.176249027 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.312298059 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.312344074 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.312416077 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.312443972 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.312475920 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.312495947 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.346899986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.346942902 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.347014904 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.347035885 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.347070932 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.347093105 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.367068052 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.367109060 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.367168903 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.367187977 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.367219925 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.367254019 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.387187004 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.387243986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.387288094 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.387300968 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.387357950 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.387358904 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.509144068 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.509203911 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.509279013 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.509300947 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.509341955 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.509363890 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.518770933 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.519242048 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.519335985 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.519649982 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.519666910 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.522968054 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.523010015 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.523063898 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.523103952 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.523135900 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.523159981 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.538471937 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.538532019 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.538547993 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.538562059 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.538594007 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.538640022 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.545672894 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.546494961 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.546538115 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.546837091 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.546853065 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.553889036 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.553930998 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.553981066 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.553998947 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.554027081 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.554044962 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.567275047 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.567336082 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.567357063 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.567368031 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.567399979 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.567418098 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.582009077 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.582343102 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.582398891 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.582823038 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.582837105 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.584743977 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.584793091 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.584815025 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.584829092 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.584873915 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.584873915 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.598119020 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.598165989 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.598221064 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.598241091 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.598270893 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.598311901 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.613596916 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.613639116 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.613691092 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.613709927 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.613733053 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.613765955 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.712259054 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.712308884 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.712361097 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.712384939 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.712414026 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.712445021 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.726789951 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.726835966 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.726886988 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.726886988 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.726903915 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.726949930 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.728895903 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.731681108 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.731709957 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.732064009 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.732074976 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.733551979 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.733598948 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.733637094 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.733654976 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.733679056 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.735266924 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.744780064 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.744821072 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.744872093 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.744872093 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.744887114 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.744961023 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.755079031 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.755120993 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.755163908 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.755163908 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.755177975 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.755239010 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.759552956 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.759911060 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.759954929 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.760273933 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.760286093 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.766711950 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.766753912 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.766810894 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.766828060 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.766899109 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.766923904 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.776676893 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.776719093 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.776755095 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.776772976 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.776798010 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.776840925 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.905066967 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.905113935 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.905268908 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.905311108 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.905375004 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.913104057 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.913153887 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.913196087 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.913208961 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.913239956 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.913260937 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.921228886 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.921272039 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.921313047 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.921324968 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.921354055 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.921411991 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.928313017 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.928355932 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.928399086 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.928411007 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.928437948 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.928514004 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.936429977 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.936486959 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.936511993 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.936522961 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.936562061 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.936578989 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.943905115 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.943947077 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.943993092 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.944010019 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.944037914 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.944080114 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.951939106 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.951977968 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.952037096 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.952037096 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.952052116 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.952125072 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.954066992 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.954204082 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.954308987 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.954391956 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.954391956 CET	49781	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.954428911 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.954458952 CET	443	49781	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.956859112 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.956933022 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.957009077 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.957128048 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.957159996 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.960028887 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.960069895 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.960123062 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.960163116 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.960196018 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.960254908 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.998308897 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.998467922 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.998538971 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.998600960 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.998600960 CET	49779	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:11.998636961 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:11.998666048 CET	443	49779	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.000509977 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.000598907 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.001250029 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.001358986 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.001398087 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.025916100 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.026067019 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.026137114 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.026200056 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.026200056 CET	49780	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.026238918 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.026269913 CET	443	49780	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.028050900 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.028090000 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.028178930 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.028305054 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.028330088 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.106654882 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.106698990 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.106762886 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.106800079 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.106831074 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.106961012 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.114770889 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.114810944 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.114912987 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.114928007 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.115015984 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.121737957 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.121783018 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.121824980 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.121843100 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.121870995 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.121907949 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.129787922 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.129831076 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.129869938 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.129888058 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.129915953 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.129939079 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.137834072 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.137875080 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.137926102 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.137926102 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.137942076 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.138004065 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.145348072 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.145390987 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.145430088 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.145461082 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.145490885 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.145519972 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.153465986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.153507948 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.153551102 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.153562069 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.153589010 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.153654099 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.160514116 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.160571098 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.160595894 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.160608053 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.160640001 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.160657883 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.165921926 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.165977955 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.166127920 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.166173935 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.166173935 CET	49782	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.166194916 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.166218996 CET	443	49782	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.168473959 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.168545008 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.168621063 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.168761015 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.168797970 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.197904110 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.198057890 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.198121071 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.198194027 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.198194027 CET	49783	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.198218107 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.198240042 CET	443	49783	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.199904919 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.199985027 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.200069904 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.200160027 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.200193882 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.308088064 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.308135986 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.308166981 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.308186054 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.308223963 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.308265924 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.316023111 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.316067934 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.316109896 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.316121101 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.316205978 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.316386938 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.323115110 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.323158026 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.323199987 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.323215961 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.323240042 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.323291063 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.331204891 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.331265926 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.331279039 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.331290960 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.331346035 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.331346035 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.331367970 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.339184999 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.339229107 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.339277983 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.339278936 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.339293003 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.339349985 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.346834898 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.346875906 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.346916914 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.346934080 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.346956968 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.347012043 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.628902912 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.628931999 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.628997087 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629034996 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629072905 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629106045 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629127026 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629147053 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629205942 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629220963 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629234076 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629265070 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629300117 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629415035 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629458904 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629502058 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629518032 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629542112 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629578114 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629654884 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629702091 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629776955 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629776955 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629791021 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629837990 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629843950 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629872084 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629903078 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629925013 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629926920 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.629949093 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.629986048 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630004883 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630112886 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630152941 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630182981 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630192995 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630220890 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630261898 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630300999 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630341053 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630369902 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630399942 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630425930 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630450010 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630491972 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630538940 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630570889 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630580902 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630611897 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630629063 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630693913 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630733013 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630764008 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630773067 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630796909 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630814075 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630842924 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630887985 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630937099 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630937099 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.630949020 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.630992889 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.711169958 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.711232901 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.711328983 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.711352110 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.711378098 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.713257074 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.719202995 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.719269037 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.719327927 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.719340086 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.719363928 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.719391108 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.727164984 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.727215052 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.727257967 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.727269888 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.727297068 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.727330923 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.734224081 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.734268904 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.734345913 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.734358072 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.734384060 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.734402895 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.742172003 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.742217064 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.742259979 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.742270947 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.742299080 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.742319107 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.749851942 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.749897957 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.749938011 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.749949932 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.749974966 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.749991894 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.757831097 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.757873058 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.757905960 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.757916927 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.757942915 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.757961035 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.765939951 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.765984058 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.766041994 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.766055107 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.766083002 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.766139030 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.913976908 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.914024115 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.914050102 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.914067984 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.914096117 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.914113045 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.920075893 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.920116901 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.920152903 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.920165062 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.920192003 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.920222044 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.926204920 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.926249027 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.926281929 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.926292896 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.926325083 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.926342010 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.931710958 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.931754112 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.931797028 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.931807995 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.931839943 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.931859970 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.937865973 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.937907934 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.937946081 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.937957048 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.938009024 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.938009977 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943629980 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.943696022 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.943713903 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943736076 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.943764925 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943782091 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943856955 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.943892956 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943931103 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.943959951 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943959951 CET	49778	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:12.943981886 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:12.944003105 CET	443	49778	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.105046988 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.105663061 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.105720997 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.106082916 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.106101990 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.119328022 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.120121956 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.120196104 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.120501041 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.120517969 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.133258104 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.133727074 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.133791924 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.134356022 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.134371042 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.135685921 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.136105061 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.136140108 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.136631012 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.136642933 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.139209986 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.139983892 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.140016079 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.140563965 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.140574932 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.550720930 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.550868034 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.550956011 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.551275015 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.551332951 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.551367044 CET	49788	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.551383018 CET	443	49788	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.554466009 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.554513931 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.554673910 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.554831982 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.554850101 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.565644979 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.565713882 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.565880060 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.565932035 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.565968990 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.565994978 CET	49784	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.566009045 CET	443	49784	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.568217993 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.568239927 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.568324089 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.568521976 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.568536043 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.589833975 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.589890003 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.590194941 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.590290070 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.590329885 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.590356112 CET	49787	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.590373039 CET	443	49787	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.592608929 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.592679977 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.592813969 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.592871904 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.592892885 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.592914104 CET	49785	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.592926979 CET	443	49785	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.593286991 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.593302965 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.593401909 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.593614101 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.593626976 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.595598936 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.595643997 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.595726967 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.595902920 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.595930099 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.815723896 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.815952063 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.816153049 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.837476015 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.837497950 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.837543011 CET	49786	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.837558031 CET	443	49786	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.843425035 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.843482971 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:14.843559027 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.843705893 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:14.843724966 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.300728083 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.301228046 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.301290035 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.302058935 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.302077055 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.309739113 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.310637951 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.310678959 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.311033010 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.311044931 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.383996010 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.384079933 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.384227037 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.384393930 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.384428024 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.397676945 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.401467085 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.401480913 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.401866913 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.401871920 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.458435059 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.458827972 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.458842993 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.459142923 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.459147930 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.564157963 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.564613104 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.564635992 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.565046072 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.565053940 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.744879961 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.745057106 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.745141029 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.745240927 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.745242119 CET	49790	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.745284081 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.745312929 CET	443	49790	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.748030901 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.748064995 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.748150110 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.748313904 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.748331070 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.750673056 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.750735998 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.750798941 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.750893116 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.750936985 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.750965118 CET	49792	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.750981092 CET	443	49792	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.752914906 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.752958059 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.753046036 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.753170967 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.753200054 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.842283010 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.842329979 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.842413902 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.842531919 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.842531919 CET	49791	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.842547894 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.842556953 CET	443	49791	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.847533941 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.847558975 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.847668886 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.847800970 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.847814083 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.903559923 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.903709888 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.903758049 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.903928995 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.903939009 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.903948069 CET	49789	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.903951883 CET	443	49789	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.910687923 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.910768986 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.910832882 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.911006927 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.911037922 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.998919964 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.999070883 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.999147892 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.999201059 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.999201059 CET	49793	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:16.999216080 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:16.999227047 CET	443	49793	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:17.001576900 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:17.001609087 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:17.001677990 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:17.001816988 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:17.001828909 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.036855936 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.037384033 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.037440062 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.038283110 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.038315058 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.474057913 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.474550962 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.474623919 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.475020885 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.475035906 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.495652914 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.495707035 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.495960951 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.496011019 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.496215105 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.496258974 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.496258974 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.496305943 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.496342897 CET	49794	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.496357918 CET	443	49794	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.535916090 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.537621975 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.537688017 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.537900925 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.537914991 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.629458904 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.633718967 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.633737087 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.634044886 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.634051085 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.661633015 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.665610075 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.665649891 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.665863037 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.665873051 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.722966909 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.723433971 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.723447084 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.724010944 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.724014997 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.909832001 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.909878969 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.909955025 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.910111904 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.910111904 CET	49796	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.910146952 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.910170078 CET	443	49796	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.912378073 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.912414074 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.912487984 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.912688971 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.912703991 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.979129076 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.979274035 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.979460955 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.979460955 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.979460955 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.982076883 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.982161999 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:18.982265949 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.982414007 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:18.982451916 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.073205948 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.073246002 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.073476076 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.073538065 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.073556900 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.073566914 CET	49797	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.073574066 CET	443	49797	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.075620890 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.075680971 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.075773001 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.075902939 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.075932980 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.097397089 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.097527981 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.097613096 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.097660065 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.097697973 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.097724915 CET	49798	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.097738981 CET	443	49798	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.099622965 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.099659920 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.099740028 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.099873066 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.099899054 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.158044100 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.158205986 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.158370018 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.158370972 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.158370972 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.160094023 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.160176992 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.160278082 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.160392046 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.160429001 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.281784058 CET	49795	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.281847954 CET	443	49795	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:19.469403982 CET	49799	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:19.469419956 CET	443	49799	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.724462986 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.724915981 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.724975109 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.725337982 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.725352049 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.746716022 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.746963978 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.747004032 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.747375965 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.747389078 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.919992924 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.920459032 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.920547962 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.920816898 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.920830011 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.968823910 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.978210926 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.978243113 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:20.978657007 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:20.978668928 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.032876015 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.033359051 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.033433914 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.033730984 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.033746958 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.161330938 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.161487103 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.161591053 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.161644936 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.161644936 CET	49801	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.161679983 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.161708117 CET	443	49801	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.164146900 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.164222002 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.164513111 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.164669991 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.164704084 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.190660954 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.190706968 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.190778971 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.190923929 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.190923929 CET	49800	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.190953016 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.190979004 CET	443	49800	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.193383932 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.193449974 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.193530083 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.193675995 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.193706036 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.374449968 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.374496937 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.374566078 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.374756098 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.374808073 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.374841928 CET	49802	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.374857903 CET	443	49802	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.377810955 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.377865076 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.377980947 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.378149033 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.378180027 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.411470890 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.411612988 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.411674976 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.411725044 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.411725998 CET	49803	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.411752939 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.411775112 CET	443	49803	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.413817883 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.413858891 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.413930893 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.414072037 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.414098978 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.492820978 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.493005991 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.493134022 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.494910002 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.494910002 CET	49804	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.494911909 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.494949102 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.494963884 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.494973898 CET	443	49804	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:21.495054007 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.495177031 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:21.495208025 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.034262896 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.034698963 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.034756899 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.035136938 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.035155058 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.069349051 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.114797115 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.114856005 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.115262032 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.115276098 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.219902992 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.220870972 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.220921040 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.221311092 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.221326113 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.238682985 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.241755009 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.241811991 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.242028952 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.242046118 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.242582083 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.245444059 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.245480061 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.245798111 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.245809078 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.489506960 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.489667892 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.489756107 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.490777016 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.490818024 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.490847111 CET	49805	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.490861893 CET	443	49805	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.522293091 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.522331953 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.522416115 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.522569895 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.522633076 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.522706985 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.526026011 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.526077032 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.526115894 CET	49806	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.526130915 CET	443	49806	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.529686928 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.529717922 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.551131010 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.551193953 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.551287889 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.554671049 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.554698944 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.653939009 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.654086113 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.654159069 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.654241085 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.654242039 CET	49809	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.654283047 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.654313087 CET	443	49809	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.669003010 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.669058084 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.669178009 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.669332027 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.669359922 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.682482958 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.682645082 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.682707071 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.682785034 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.682785034 CET	49808	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.682835102 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.682888985 CET	443	49808	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.684627056 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.684679031 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.684757948 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.684915066 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.684945107 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.695046902 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.695086002 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.695137978 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.695283890 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.695306063 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.695353985 CET	49807	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.695365906 CET	443	49807	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.697133064 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.697156906 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:23.697222948 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.697412968 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:23.697438002 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.250633955 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.251478910 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.251547098 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.251933098 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.251946926 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.415106058 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.415661097 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.415680885 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.416059971 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.416065931 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.469361067 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.470278025 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.470295906 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.470731974 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.470736027 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.517766953 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.518270016 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.518318892 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.518759966 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.518776894 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.547509909 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.548125982 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.548144102 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.548722982 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.548733950 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.688437939 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.688503027 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.688694954 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.688772917 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.688772917 CET	49810	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.688815117 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.688841105 CET	443	49810	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.691097021 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.691158056 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.691231012 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.691369057 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.691394091 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.869569063 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.869714022 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.869788885 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.869985104 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.870014906 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.870043039 CET	49811	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.870058060 CET	443	49811	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.872318029 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.872415066 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.872603893 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.872694016 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.872714996 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.912062883 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.912224054 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.912348032 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914138079 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914138079 CET	49813	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914135933 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914182901 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.914211035 CET	443	49813	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.914217949 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.914294958 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914412022 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.914438963 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.972335100 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.972497940 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.972573042 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.999067068 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.999109030 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:25.999166012 CET	49812	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:25.999183893 CET	443	49812	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.001694918 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.001771927 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.001830101 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.011257887 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.011257887 CET	49814	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.011287928 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.011308908 CET	443	49814	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.023248911 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.023329973 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.023396969 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.038052082 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.038130999 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.038192987 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.038223982 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:26.038230896 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.038295984 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:26.038316011 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.538284063 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.538743973 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.538819075 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.539151907 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.539165020 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.658521891 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.658880949 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.658927917 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.659248114 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.659264088 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.757812023 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.758147001 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.758181095 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.758506060 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.758517027 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.801593065 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.801934958 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.801978111 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.802282095 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.802294016 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.821085930 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.821408033 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.821438074 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.821737051 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.821746111 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.991471052 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.991511106 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.991573095 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.991720915 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.991722107 CET	49815	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.991763115 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.991789103 CET	443	49815	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.994165897 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.994195938 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:27.994255066 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.994488001 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:27.994502068 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.100967884 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.101142883 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.101217031 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.101294041 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.101294041 CET	49816	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.101334095 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.101356983 CET	443	49816	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.103406906 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.103490114 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.103585005 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.103718996 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.103766918 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.190764904 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.190937996 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.191060066 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.191097021 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.191097021 CET	49818	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.191113949 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.191133976 CET	443	49818	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.192876101 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.192898989 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.192965031 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.193098068 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.193110943 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.254780054 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.254919052 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.254998922 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.255065918 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.255065918 CET	49817	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.255116940 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.255142927 CET	443	49817	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.257066965 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.257107019 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.257193089 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.257329941 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.257355928 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.401648045 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.401748896 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.401812077 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.401957035 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.401977062 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.402002096 CET	49819	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.402014971 CET	443	49819	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.404251099 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.404334068 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:28.404428005 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.404613018 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:28.404645920 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.802942991 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.803495884 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.803529978 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.804092884 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.804099083 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.962347984 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.963246107 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.963298082 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.963707924 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.963726044 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.977432966 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.978079081 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.978107929 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:29.978404045 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:29.978408098 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.042531013 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.042967081 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.043041945 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.043307066 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.043339968 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.488791943 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.488842010 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.488945007 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489269972 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489365101 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489393950 CET	49820	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489408970 CET	443	49820	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489429951 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489509106 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489581108 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489581108 CET	49821	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489590883 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489622116 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.489643097 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.489645958 CET	443	49821	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.490014076 CET	49822	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.490019083 CET	443	49822	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.491302013 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.492060900 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.492135048 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.492657900 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.492676020 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.492682934 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.492742062 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.492829084 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.492959023 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.492989063 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.493647099 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493654966 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493674994 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.493699074 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.493756056 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493827105 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493904114 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493920088 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.493968964 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.493993044 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.695601940 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.695746899 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.695859909 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.696290970 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.696309090 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.696336031 CET	49823	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.696348906 CET	443	49823	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.699444056 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.699529886 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.699626923 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.699801922 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.699839115 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.935072899 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.935134888 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.935245991 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.935662985 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.935719013 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.935751915 CET	49824	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.935766935 CET	443	49824	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.938724041 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.938824892 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:30.938908100 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.939126968 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:30.939160109 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.273874998 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.274360895 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.274418116 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.274734974 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.274748087 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.293876886 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.294223070 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.294239998 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.294548988 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.294559956 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.392236948 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.392688990 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.392765045 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.393059015 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.393073082 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.588285923 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.588742018 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.588804960 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.589148045 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.589167118 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.722201109 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.722254038 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.722346067 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.722532988 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.722533941 CET	49827	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.722575903 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.722601891 CET	443	49827	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.725238085 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.725306034 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.725392103 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.725548029 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.725579023 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.740639925 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.740828037 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.740931034 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.740931034 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.740931988 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.742755890 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.742873907 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.743189096 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.743189096 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.743349075 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.802098036 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.802933931 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.802933931 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.803009033 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.803041935 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.853420019 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.853564024 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.853647947 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.853727102 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.853727102 CET	49826	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.853766918 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.853792906 CET	443	49826	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.855684042 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.855762959 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:32.855858088 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.855992079 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:32.856024027 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.040971041 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.041049004 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.041121006 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.041286945 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.041286945 CET	49828	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.041326046 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.041348934 CET	443	49828	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.043776989 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.043857098 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.043951035 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.044096947 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.044131041 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.047445059 CET	49825	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.047492027 CET	443	49825	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.254224062 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.254286051 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.254437923 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.254513979 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.254513979 CET	49829	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.254554987 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.254584074 CET	443	49829	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.256429911 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.256479025 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:33.256561995 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.256681919 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:33.256710052 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.552812099 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.553277016 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.553348064 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.553678989 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.553711891 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.565916061 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.566194057 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.566271067 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.566499949 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.566514015 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.685311079 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.685750961 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.685832977 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.685971975 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.685986042 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.842878103 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.843359947 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.843431950 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:34.843805075 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:34.843820095 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.007245064 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.007263899 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.007303953 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.007361889 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.007424116 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.007595062 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.007595062 CET	49830	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.007636070 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.007677078 CET	443	49830	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.010273933 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.010355949 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.010443926 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.010592937 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.010622025 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.014921904 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.017339945 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.017405987 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.017505884 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.017507076 CET	49831	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.017549992 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.017582893 CET	443	49831	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.019434929 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.019474983 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.019550085 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.019666910 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.019682884 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.071693897 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.072135925 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.072213888 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.072412968 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.072426081 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.131031990 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.131159067 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.131225109 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.131294966 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.131350040 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.131386042 CET	49832	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.131401062 CET	443	49832	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.133567095 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.133620024 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.133709908 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.133833885 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.133857012 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.288280964 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.288341999 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.288526058 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.288584948 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.288688898 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.288688898 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.288726091 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.289064884 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.289143085 CET	443	49833	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.289199114 CET	49833	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.290559053 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.290591955 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.290662050 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.290786982 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.290801048 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.517748117 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.517775059 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.517832041 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.517884016 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.517936945 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.518069029 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.518085957 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.518119097 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.518270016 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.518311024 CET	443	49834	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.518357038 CET	49834	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.520508051 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.520558119 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:35.520653963 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.520802975 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:35.520831108 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.009161949 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.009840012 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.009888887 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.010452032 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.010469913 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.035063028 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.035517931 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.035542965 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.036070108 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.036086082 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.050801992 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.051060915 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.051078081 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.051397085 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.051403999 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.145454884 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.148390055 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.148416996 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.148756981 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.148763895 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.303724051 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.304160118 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.304181099 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.304600000 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.304611921 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449059010 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449343920 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449420929 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.449451923 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449542046 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.449575901 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449605942 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.449737072 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449774027 CET	443	49835	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.449820995 CET	49835	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.451719999 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.451787949 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.451877117 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.451993942 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.452018976 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.469377995 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.472439051 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.472537041 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.476042986 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.476042986 CET	49837	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.476068020 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.476089954 CET	443	49837	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.478672028 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.478790998 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.478889942 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.478996992 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.479029894 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.502788067 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.505784988 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.505942106 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.506009102 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.506030083 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.506042957 CET	49836	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.506051064 CET	443	49836	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.507818937 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.507857084 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.507934093 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.508028984 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.508048058 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.597584009 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.597747087 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.597809076 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.597868919 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.597876072 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.597887993 CET	49838	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.597892046 CET	443	49838	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.599606991 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.599638939 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.599724054 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.599833012 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.599858999 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.788203001 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.791210890 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.791271925 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.791305065 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.791344881 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.791377068 CET	49839	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.791392088 CET	443	49839	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.793174028 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.793207884 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:37.793279886 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.793407917 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:37.793435097 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.217649937 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.218135118 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.218189001 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.218611956 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.218625069 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.237039089 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.237370014 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.237410069 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.237751007 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.237782955 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.259080887 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.259361982 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.259378910 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.259618044 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.259629965 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.329283953 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.330008030 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.330044985 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.330286026 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.330297947 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.674078941 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.676755905 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.677112103 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.677304029 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.677304029 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.677304029 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.677313089 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.677340031 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.677637100 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.677649021 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.679955006 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.680003881 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.680083036 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.680222034 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.680239916 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.685059071 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.688219070 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.688290119 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.688386917 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.688386917 CET	49840	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.688431025 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.688458920 CET	443	49840	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.690311909 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.690361977 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.690448999 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.690572023 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.690598965 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.712016106 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.715135098 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.715205908 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.715264082 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.715284109 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.715341091 CET	49842	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.715354919 CET	443	49842	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.717248917 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.717264891 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.717333078 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.717457056 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.717469931 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.772742987 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.772888899 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.772963047 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.773003101 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.773056030 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.773088932 CET	49843	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.773103952 CET	443	49843	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.774998903 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.775083065 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.775168896 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.775296926 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.775332928 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:39.984951019 CET	49841	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:39.985018015 CET	443	49841	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:40.129841089 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:40.132977962 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:40.133145094 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.133145094 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.133145094 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.135521889 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.135605097 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:40.135687113 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.135833979 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.135869026 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:40.438069105 CET	49844	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:40.438081980 CET	443	49844	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.466047049 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.466515064 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.466528893 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.466969013 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.466974974 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.492439032 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.492755890 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.492763996 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.493089914 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.493093967 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.507683992 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.507946014 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.507975101 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.508261919 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.508272886 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.640055895 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.640687943 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.640763044 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.641141891 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.641170979 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.910075903 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.913050890 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.913113117 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.913146019 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.913161039 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.913170099 CET	49845	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.913175106 CET	443	49845	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.915818930 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.915893078 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.915982962 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.916152954 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.916172981 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.931961060 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.934911966 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.934967995 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.934993982 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.934998035 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.935007095 CET	49847	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.935009956 CET	443	49847	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.936992884 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.937078953 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.937159061 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.937271118 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.937304974 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.951802015 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.955255032 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.955301046 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.955370903 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.955493927 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.955881119 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.955912113 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.955939054 CET	49846	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.955952883 CET	443	49846	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.964356899 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.964438915 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.964525938 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.964664936 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.964698076 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.991133928 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.991661072 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.991700888 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:41.991960049 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:41.991971970 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.093056917 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.096103907 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.096209049 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.096288919 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.096290112 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.096383095 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.096384048 CET	49848	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.096424103 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.096450090 CET	443	49848	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.098361969 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.098455906 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.098546982 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.098674059 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.098712921 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.444083929 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.447201014 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.447271109 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.447381973 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.447381973 CET	49849	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.447422981 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.447448969 CET	443	49849	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.449876070 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.449932098 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:42.450012922 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.450165033 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:42.450195074 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.687880039 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.688401937 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.688460112 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.688940048 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.688992023 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.702251911 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.702619076 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.702661991 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.703303099 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.703341961 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.739535093 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.740104914 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.740164995 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.740231991 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.740246058 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.817694902 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.818135023 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.818211079 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:43.818389893 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:43.818406105 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.123003006 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.126251936 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.126298904 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.126456022 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.126456022 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.126456022 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.126456022 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.128886938 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.128961086 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.129050970 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.129187107 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.129215956 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.151299000 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.154390097 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.154464006 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.154623985 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.154623985 CET	49850	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.154671907 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.154695988 CET	443	49850	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.156291008 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.156325102 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.156404972 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.156512976 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.156539917 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.182837009 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.184031963 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.184508085 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.184545994 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.185003042 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.185018063 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.185862064 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.185959101 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.185960054 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.185960054 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.187746048 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.187799931 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.187885046 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.187990904 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.188019037 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.251517057 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.254610062 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.254791021 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.254791021 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.254791975 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.256380081 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.256413937 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.256499052 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.256608963 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.256637096 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.344449043 CET	49852	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.344484091 CET	443	49852	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.484946012 CET	49851	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.484993935 CET	443	49851	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.563060045 CET	49853	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.563097000 CET	443	49853	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.657701015 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.702871084 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.702966928 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.713061094 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.713108063 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.713139057 CET	49854	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.713160992 CET	443	49854	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.729208946 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.729253054 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:44.729324102 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.729731083 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:44.729762077 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.844567060 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.845081091 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:45.845129013 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.845525980 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:45.845558882 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.876499891 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.876816988 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:45.876836061 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:45.877111912 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:45.877123117 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.060079098 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.060446978 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.060473919 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.060803890 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.060817003 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.086139917 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.086657047 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.086716890 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.087016106 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.087030888 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.311194897 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.314294100 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.314359903 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.314393044 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.314425945 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.314495087 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.314549923 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.314549923 CET	49856	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.314585924 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.314608097 CET	443	49856	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.316836119 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.316939116 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.317020893 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.317138910 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.317166090 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.503485918 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.506513119 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.506581068 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.506611109 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.506653070 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.506719112 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.506719112 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.506778955 CET	49858	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.506797075 CET	443	49858	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.509038925 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.509108067 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.509198904 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.509341955 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.509373903 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.537498951 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.540858030 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.540930033 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.541007996 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.541007996 CET	49857	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.541049957 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.541076899 CET	443	49857	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.542748928 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.542830944 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.542910099 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.543037891 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.543071032 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.575803041 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.576143026 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.576209068 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.576510906 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.576524019 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.768461943 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.768536091 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.768620968 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.768788099 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.768788099 CET	49855	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.768837929 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.768867016 CET	443	49855	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.771507025 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.771557093 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:46.771636963 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.771758080 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:46.771786928 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.034208059 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.037349939 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.037442923 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.037518978 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.037518978 CET	49859	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.037561893 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.037587881 CET	443	49859	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.039767027 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.039797068 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:47.039859056 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.039997101 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:47.040011883 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.134057999 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.134594917 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.134654045 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.135205030 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.135220051 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.330557108 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.331002951 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.331075907 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.331403017 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.331422091 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.363867998 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.364558935 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.364609957 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.364871025 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.364883900 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.556045055 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.556535959 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.556566954 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.556926012 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.556936979 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.577402115 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.577554941 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.577627897 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.577680111 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.577716112 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.577744007 CET	49860	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.577759027 CET	443	49860	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.580296993 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.580355883 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.580452919 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.580595016 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.580621958 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.772953033 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.775892019 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.776036024 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.776195049 CET	49861	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.776226044 CET	443	49861	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.778817892 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.778851986 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.778920889 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.779036045 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.779050112 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.806247950 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.809225082 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.809282064 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.809314966 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.809345961 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.809400082 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.809441090 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.809441090 CET	49862	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.809463024 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.809485912 CET	443	49862	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.811379910 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.811418056 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.811475992 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.811594963 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.811621904 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.907485962 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.908073902 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.908094883 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:48.908488035 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:48.908493042 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.006882906 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.010056973 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.010257959 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.010257959 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.010257959 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.013523102 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.013618946 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.013710022 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.013814926 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.013853073 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.313088894 CET	49863	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.313170910 CET	443	49863	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.361076117 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.364152908 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.364217997 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.364403009 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.364418030 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.364428997 CET	49864	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.364433050 CET	443	49864	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.371031046 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.371115923 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:49.371208906 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.371340036 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:49.371373892 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.307878017 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.311772108 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.311800003 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.312175035 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.312186003 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.533562899 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.537803888 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.537826061 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.538265944 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.538276911 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.628966093 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.629288912 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.629304886 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.629621983 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.629627943 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.766778946 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.766925097 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.767033100 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.768130064 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.768161058 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.768187046 CET	49865	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.768215895 CET	443	49865	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.770328999 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.770431042 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.770529985 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.770664930 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.770715952 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.793684006 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.798530102 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.798553944 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.798901081 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.798912048 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.967248917 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.970319986 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.970381021 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.970545053 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.970571041 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.970594883 CET	49867	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.970607996 CET	443	49867	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.972995996 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.973082066 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:50.973174095 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.973366976 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:50.973401070 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.082688093 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085706949 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085762978 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.085777998 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085815907 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085856915 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.085879087 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085895061 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.085895061 CET	49866	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.085903883 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.085911989 CET	443	49866	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.088793993 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.088839054 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.088906050 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.089075089 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.089101076 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.094717979 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.095146894 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.095175028 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.095592022 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.095603943 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.240425110 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.243499041 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.243585110 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.243685961 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.243685961 CET	49868	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.243736982 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.243763924 CET	443	49868	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.246506929 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.246548891 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.246625900 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.246777058 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.246797085 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.527832031 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.530963898 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.531023979 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.535511017 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.535511017 CET	49869	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.535548925 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.535573006 CET	443	49869	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.573107958 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.573170900 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:51.573246956 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.573544979 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:51.573576927 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.567801952 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.569766998 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.569830894 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.570208073 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.570224047 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.773660898 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.777721882 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.777753115 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.778172016 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.778178930 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.888773918 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.889214993 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.889230013 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.889621019 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.889631987 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.993235111 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.993654013 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.993674040 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:52.994060993 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:52.994067907 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.215801001 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.219079971 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.219173908 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.219275951 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.219275951 CET	49871	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.219336987 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.219362974 CET	443	49871	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.222182989 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.222223043 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.222306013 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.222492933 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.222505093 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.297276974 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.297746897 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.297789097 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.298309088 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.298324108 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.331600904 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.334753990 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.334862947 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.334939003 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.334939003 CET	49872	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.334969997 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.334991932 CET	443	49872	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.337719917 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.337802887 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.337881088 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.338009119 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.338036060 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.357992887 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.358062983 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.358175039 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.358170986 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.358261108 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.358261108 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.358262062 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.360958099 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.361032009 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.361116886 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.361229897 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.361259937 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.429112911 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.432039976 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.432095051 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.432130098 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.432146072 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.432157993 CET	49873	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.432164907 CET	443	49873	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.434357882 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.434470892 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.434554100 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.434679031 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.434705973 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.656869888 CET	49870	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.656938076 CET	443	49870	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.910861969 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.913805962 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.913918972 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.914031982 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.914031982 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.914032936 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.914112091 CET	49874	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.914134979 CET	443	49874	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.916821003 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.916894913 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:53.916985035 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.917110920 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:53.917145014 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.296128035 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.296606064 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.296664953 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.297193050 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.297205925 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.343300104 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.343799114 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.343816042 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.344490051 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.344496012 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.383089066 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.383497953 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.383543015 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.384015083 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.384027004 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.439356089 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.439829111 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.439886093 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.440376997 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.440390110 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.720010042 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.722090960 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.722131014 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.722496986 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.722510099 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.740678072 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.745606899 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.745685101 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.745718002 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.745781898 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.745832920 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.745834112 CET	49876	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.745873928 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.745898962 CET	443	49876	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.748219967 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.748322964 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.748393059 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.748589039 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.748622894 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.804445982 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.809205055 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.809267998 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.809309006 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.809331894 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.809343100 CET	49875	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.809351921 CET	443	49875	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.812323093 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.812433004 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.812513113 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.812666893 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.812700987 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.827035904 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.830142975 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.830213070 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.830270052 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.830306053 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.830332994 CET	49877	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.830349922 CET	443	49877	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.832484961 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.832616091 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.832704067 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.832860947 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.832895041 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.895711899 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.898863077 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.898910999 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.898937941 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.899000883 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.899039030 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.899039984 CET	49878	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.899079084 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.899106026 CET	443	49878	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.901056051 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.901098967 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:55.901179075 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.901478052 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:55.901509047 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.161911011 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.165198088 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.165277004 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.165353060 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.165354013 CET	49879	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.165391922 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.165415049 CET	443	49879	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.168123960 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.168180943 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:56.168260098 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.168570995 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:56.168590069 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.533797026 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.534226894 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.534284115 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.534754038 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.534806967 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.622796059 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.623336077 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.623393059 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.623663902 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.623677015 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.691200018 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.691520929 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.691601992 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.691837072 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.691854000 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.806103945 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.806442022 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.806485891 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.806777954 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.806787968 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.996778011 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.996857882 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.996948004 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.996956110 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.997011900 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.997085094 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.997132063 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.997163057 CET	49880	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.997176886 CET	443	49880	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.999334097 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.999416113 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:57.999501944 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.999628067 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:57.999650955 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.045317888 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.045666933 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.045702934 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.046050072 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.046056986 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.135859013 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.138981104 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.139060974 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.139128923 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.139130116 CET	49883	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.139173031 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.139204025 CET	443	49883	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.141299963 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.141383886 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.141498089 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.141655922 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.141689062 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167380095 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167509079 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167576075 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.167607069 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167635918 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167690992 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.167747021 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.167747021 CET	49882	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.167767048 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.167788029 CET	443	49882	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.169790030 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.169872999 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.169970989 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.170063019 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.170087099 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.252718925 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.256807089 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.256994009 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.257046938 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.257076979 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.257101059 CET	49881	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.257114887 CET	443	49881	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.259363890 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.259416103 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.259505033 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.259650946 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.259694099 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.501286983 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.504617929 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.504699945 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.504755020 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.504801989 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.504836082 CET	49884	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.504849911 CET	443	49884	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.506936073 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.506978035 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:58.507045031 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.507158041 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:58.507175922 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:59.894490957 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:59.894934893 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:59.894963980 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:29:59.895401001 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:29:59.895426035 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.328191042 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.331048012 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.331127882 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.331199884 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.331199884 CET	49885	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.331228971 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.331269026 CET	443	49885	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.336215019 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.336301088 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.336391926 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.336538076 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.336570978 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.417951107 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.418589115 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.418662071 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.419847012 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.419862032 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.424998999 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.425333023 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.425345898 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.425765991 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.425862074 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.426021099 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.426063061 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.426487923 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.426491976 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.426518917 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.426532030 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.426610947 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.426670074 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.426909924 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.426924944 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.869146109 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.869298935 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.869365931 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.869457006 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.869483948 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.869508982 CET	49887	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.869523048 CET	443	49887	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.870304108 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.870368004 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.870412111 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.870560884 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.870578051 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.870587111 CET	49889	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.870592117 CET	443	49889	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871246099 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871391058 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871448994 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.871483088 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871515036 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871563911 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.871830940 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.871830940 CET	49888	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.871862888 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.871891022 CET	443	49888	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.873038054 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.873059034 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.873111963 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.873812914 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.873826027 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.874119997 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.874218941 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.874300957 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.874624014 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.874659061 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.875179052 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.875282049 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:00.875355959 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.875477076 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:00.875511885 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.058775902 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.058806896 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.058856964 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.058886051 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.058940887 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.059072971 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.059072971 CET	49886	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.059104919 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.059129000 CET	443	49886	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.061083078 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.061162949 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:01.061256886 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.061359882 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:01.061388016 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.239461899 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.240303993 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.240364075 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.240770102 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.240784883 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.678987980 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.681540966 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.681615114 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.681987047 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.682003021 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.683738947 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.684592962 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.684612036 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.685173035 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.685180902 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.690804958 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.694142103 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.694261074 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.694349051 CET	49890	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.694396973 CET	443	49890	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.698473930 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.698586941 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.698656082 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.698956013 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.698992968 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.844130039 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.891220093 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.920474052 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.920483112 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:02.927758932 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:02.927764893 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.123712063 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.126883984 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.126921892 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.126946926 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.126982927 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.127048016 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.127048969 CET	49892	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.127096891 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.127121925 CET	443	49892	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.127343893 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.129266977 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.129337072 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.129409075 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.129530907 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.129566908 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.130336046 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.130393028 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.130414009 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.130430937 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.130439043 CET	49891	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.130444050 CET	443	49891	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.132230043 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.132318974 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.132395029 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.132504940 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.132558107 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.287705898 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.290858030 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.290889978 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.290956020 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.291069984 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.291246891 CET	49894	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.291264057 CET	443	49894	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.293226004 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.293267012 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:03.293355942 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.293473959 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:03.293500900 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.489700079 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.491736889 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.491796970 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.492132902 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.492146015 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.746329069 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.746918917 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.746984959 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.747369051 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.747385025 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.933753967 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.936867952 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.936964035 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.937026024 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.937026024 CET	49895	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.937066078 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.937088966 CET	443	49895	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.940395117 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.943802118 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.943859100 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.944616079 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.944629908 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.946264982 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.946343899 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:04.946449995 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.946939945 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:04.946971893 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.080034971 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.086220026 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.086257935 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.090449095 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.090461969 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.192569017 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.194669962 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.194744110 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.384187937 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.387288094 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.387414932 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.523756027 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.526916027 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.527004004 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.675817966 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.719362020 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.828181982 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.828197956 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.828680038 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.828685999 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.861361027 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.861361027 CET	49897	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.861432076 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.861459017 CET	443	49897	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.863445044 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.863445997 CET	49896	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.863509893 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.863542080 CET	443	49896	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.864912987 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.864912987 CET	49898	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.864928007 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.864948034 CET	443	49898	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.875444889 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.875514030 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.875608921 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.875983000 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.876017094 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.877337933 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.877419949 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.877479076 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.878268003 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.878289938 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.878341913 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.878509998 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.878531933 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:05.879374027 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:05.879401922 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.156925917 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.160058975 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.160135031 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.160223007 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.160223007 CET	49893	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.160284042 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.160310984 CET	443	49893	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.163228989 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.163327932 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.163418055 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.163597107 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.163630009 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.846986055 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.847553015 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.847584963 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:06.848130941 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:06.848136902 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.301398039 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.304843903 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.304955959 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.305248976 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.305298090 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.305335999 CET	49899	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.305351973 CET	443	49899	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.308128119 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.308175087 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.309334993 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.309490919 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.309525013 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.597697020 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.598367929 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.598443031 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.598866940 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.598885059 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.599987984 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.600253105 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.600320101 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.600708008 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.600724936 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.680264950 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.680738926 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.680811882 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.681251049 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.681265116 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.886943102 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.887428045 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.887505054 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:07.888024092 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:07.888036966 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.033101082 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.035088062 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.035176039 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.035253048 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.035276890 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.035358906 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.035413980 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.035413980 CET	49900	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.035454988 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.035484076 CET	443	49900	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.036200047 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.036262035 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.036323071 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.036323071 CET	49901	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.036356926 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.036381006 CET	443	49901	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.038003922 CET	49905	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038085938 CET	443	49905	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.038161993 CET	49905	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038357973 CET	49905	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038393974 CET	443	49905	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.038619995 CET	49906	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038661957 CET	443	49906	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.038722038 CET	49906	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038827896 CET	49906	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.038842916 CET	443	49906	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.155571938 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.158344030 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.158456087 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.158456087 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.160211086 CET	49902	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.160222054 CET	49907	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.160248995 CET	443	49902	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.160289049 CET	443	49907	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.160371065 CET	49907	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.160464048 CET	49907	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.160494089 CET	443	49907	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.324923038 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.327821016 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.327892065 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.328408957 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.328408957 CET	49903	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.328438044 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.328459978 CET	443	49903	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.331792116 CET	49908	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.331834078 CET	443	49908	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:08.331907034 CET	49908	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.333271980 CET	49908	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:08.333301067 CET	443	49908	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.097083092 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.097779036 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.097803116 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.099123955 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.099129915 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.541945934 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.545047045 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.545140982 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.545598984 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.545644999 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.545676947 CET	49904	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.545692921 CET	443	49904	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.548213005 CET	49909	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.548299074 CET	443	49909	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.548394918 CET	49909	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.548536062 CET	49909	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.548561096 CET	443	49909	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.917948008 CET	443	49905	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.918402910 CET	49905	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.918479919 CET	443	49906	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.918483019 CET	443	49905	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.918875933 CET	49905	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.918890953 CET	443	49905	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.918895960 CET	49906	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.918956995 CET	443	49906	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.919435978 CET	49906	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.919450998 CET	443	49906	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.951656103 CET	443	49907	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.952003002 CET	49907	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.952023029 CET	443	49907	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:09.952538967 CET	49907	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:09.952548981 CET	443	49907	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:10.066354036 CET	443	49908	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:10.066751957 CET	49908	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:10.066822052 CET	443	49908	13.107.246.63	192.168.2.4
Nov 22, 2024 01:30:10.067187071 CET	49908	443	192.168.2.4	13.107.246.63
Nov 22, 2024 01:30:10.067203999 CET	443	49908	13.107.246.63	192.168.2.4

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 22, 2024 01:28:55.172580004 CET	1.1.1.1	192.168.2.4	0xd769	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:28:55.172580004 CET	1.1.1.1	192.168.2.4	0xd769	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:29:08.641027927 CET	1.1.1.1	192.168.2.4	0x448c	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:29:08.641027927 CET	1.1.1.1	192.168.2.4	0x448c	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:28:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:28:57 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:28:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 21 Nov 2024 12:25:08 GMT ETag: "0x8DD0A27899CAFB6" x-ms-request-id: cb7fa3cf-001e-000b-073d-3c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002857Z-15b8b599d88vp97chC1TEB5pzw00000000h000000000hcpr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:28:57 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-22 00:28:57 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-22 00:28:58 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-22 00:28:58 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-22 00:28:58 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:28:59 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:00 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5299024a-c01e-0079-4d47-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002900Z-174c587ffdfmrvb9hC1TEBtn3800000000hg00000000rte9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:00 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002900Z-178bfbc474bv587zhC1NYCny5w000000020000000000s15t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e7cf57de-301e-006e-404d-3cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002900Z-15b8b599d889gj5whC1TEBfyk000000000c0000000001suh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002900Z-174c587ffdf8lw6dhC1TEBkgs800000000m000000000sc7f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:00 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d4aa3518-701e-0098-625d-3c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002900Z-15b8b599d88l2dpthC1TEBmzr000000000n000000000cfq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:02 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 657d02d2-201e-0033-2f57-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002902Z-178bfbc474bwlrhlhC1NYCy3kg000000025g00000000hnbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:02 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8592a006-f01e-0085-6b6a-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002902Z-174c587ffdf4zw2thC1TEBu34000000000r000000000hspz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:02 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002902Z-178bfbc474bgvl54hC1NYCsfuw000000026000000000ckpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:02 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:02 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002902Z-15b8b599d885ffrhhC1TEBtuv000000000rg00000000brz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:02 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:02 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:02 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 6ebbc676-001e-005a-784b-3cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002902Z-15b8b599d88vp97chC1TEB5pzw00000000m000000000hp5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:02 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:04 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:04 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5235ff2f-501e-008f-1c4e-3c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002904Z-178bfbc474bh5zbqhC1NYCkdug0000000260000000006pzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:04 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:04 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002904Z-15b8b599d88phfhnhC1TEBr51n00000000vg000000005cz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:04 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002904Z-178bfbc474bp8mkvhC1NYCzqnn000000020000000000hu3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:04 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002904Z-178bfbc474bv7whqhC1NYC1fg4000000029g000000003g1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:04 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002904Z-174c587ffdf59vqchC1TEByk6800000000r000000000vur1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:06 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: d02e2b11-101e-00a2-2d3a-3c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002906Z-178bfbc474bfw4gbhC1NYCunf400000002a0000000001svw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:06 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002907Z-178bfbc474bbcwv4hC1NYCypys0000000250000000002p9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:06 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002907Z-174c587ffdf8lw6dhC1TEBkgs800000000h000000000ranw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:06 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:07 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8189730a-201e-0003-216a-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002907Z-178bfbc474bmqmgjhC1NYCy16c000000025g00000000tmx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:07 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002907Z-15b8b599d88z9sc7hC1TEBkr4w00000000r000000000nhmr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:09 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 90548f26-b01e-0021-643a-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002909Z-178bfbc474bbcwv4hC1NYCypys0000000240000000005s4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:09 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 7a05741d-701e-0021-0754-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002909Z-15b8b599d88z9sc7hC1TEBkr4w00000000xg00000000092m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:09 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 367ebca4-601e-0070-6762-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002909Z-178bfbc474btrnf9hC1NYCb80g00000002bg00000000d6uz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:09 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002909Z-15b8b599d885v8r9hC1TEB104g00000000pg00000000hvuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:09 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:09 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 57389be4-e01e-0003-606c-3c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002909Z-174c587ffdfdwxdvhC1TEB1c4n00000000mg00000000bqqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:10 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49778	13.107.246.63	443	7436	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:10 UTC	219	OUT	GET /rules/excel.exe-Production-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:10 UTC	493	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:10 GMT Content-Type: text/plain Content-Length: 1113512 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 21 Nov 2024 12:25:08 GMT ETag: "0x8DD0A2789CC1D3F" x-ms-request-id: 98f07c92-201e-003c-635f-3c30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002910Z-174c587ffdfmlsmvhC1TEBvyks00000000sg00000000pd3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:10 UTC	15891	IN	Data Raw: 31 30 30 30 34 32 76 32 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 34 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 55 58 2e 44 65 73 6b 74 6f 70 2e 4f 66 66 69 63 65 54 68 65 6d 65 2e 41 70 70 2e 49 6e 69 74 22 20 41 54 54 3d 22 63 34 33 38 38 63 39 37 37 32 39 37 34 31 33 62 62 30 35 34 62 61 64 31 61 63 66 30 61 64 65 31 2d 63 63 35 38 65 35 33 65 2d 66 35 61 34 2d 34 66 33 37 2d 62 30 64 32 2d 39 61 38 30 37 39 65 33 34 34 32 30 2d 36 38 37 39 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 63 6d 39 79 35 Data Ascii: 100042v2+<?xml version="1.0" encoding="utf-8"?><R Id="100042" V="2" DC="SM" EN="Office.UX.Desktop.OfficeTheme.App.Init" ATT="c4388c977297413bb054bad1acf0ade1-cc58e53e-f5a4-4f37-b0d2-9a8079e34420-6879" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="cm9y5
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 30 31 31 37 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 31 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 38 79 6c 6c 66 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 56 20 56 3d 22 43 6c 69 63 6b 22 20 54 3d 22 57 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 Data Ascii: /> </T></R><$!#>100117v0+<?xml version="1.0" encoding="utf-8"?><R Id="100117" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="8yllf" /> </S> <C T="W" I="0" O="false"> <V V="Click" T="W" /> </C> <C T="U32
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 37 38 31 76 31 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 37 38 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 67 6f 34 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 68 6c 76 79 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 49 33 32 Data Ascii: </C> <T> <S T="2" /> <S T="3" /> </T></R><$!#>10781v1+<?xml version="1.0" encoding="utf-8"?><R Id="10781" V="1" DC="SM" T="Subrule" xmlns=""> <S> <UTS T="1" Id="bgo4t" /> <UTS T="2" Id="bhlvy" /> </S> <C T="I32
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 30 30 30 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <L> <O T="GT"> <L> <S T="1" F="0" /> </L> <R> <V V="1000" T="U32" /> </R> </O> </L> <R> <O T="LE"> <
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 20 49 3d 22 32 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 56 69 64 65 6f 43 61 6c 6c 56 69 64 65 6f 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 36 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 33 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 53 61 53 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 34 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 4f 76 65 72 66 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 Data Ascii: I="22" O="false" N="FlyoutVideoCallVideo"> <C> <S T="26" /> </C> </C> <C T="U32" I="23" O="false" N="FlyoutSaS"> <C> <S T="27" /> </C> </C> <C T="U32" I="24" O="false" N="FlyoutOverflow"> <C> <S T
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 39 30 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 4e 44 42 2e 55 6e 6b 6e 6f 77 6e 2e 43 6f 72 72 75 70 74 69 6f 6e 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 53 3d 22 31 30 30 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 45 74 77 20 54 3d 22 31 22 20 45 3d 22 33 39 35 22 20 47 3d 22 7b 32 61 64 66 38 65 32 33 2d 30 61 66 39 2d Data Ascii: coding="utf-8"?><R Id="10907" V="0" DC="SM" EN="Office.Outlook.Desktop.NDB.Unknown.Corruption" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" S="100" DCa="PSU" xmlns=""> <S> <Etw T="1" E="395" G="{2adf8e23-0af9-
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 33 22 20 49 64 3d 22 62 70 66 79 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 34 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 50 68 6f 74 6f 53 69 7a 65 49 6e 42 79 74 65 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 55 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 Data Ascii: "TelemetryShutdown" /> <UTS T="3" Id="bpfy1" /> <F T="4"> <O T="GT"> <L> <S T="3" F="PhotoSizeInBytes" /> </L> <R> <V V="0" T="U64" /> </R> </O> </F> </S> <C T="U
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 65 76 65 6e 74 49 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 33 35 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 74 63 69 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <L> <S T="4" F="eventId" /> </L> <R> <V V="135" T="I32" /> </R> </O> </F> <F T="7"> <O T="EQ"> <L> <S T="5" F="tcid" /> </L> <R> <V
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 3c 46 20 54 3d 22 31 30 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 46 69 6c 65 50 72 6f 74 65 63 74 69 6f 6e 53 74 61 74 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 35 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 4f 66 54 68 72 6f 77 6e 45 78 63 65 70 74 69 6f 6e 22 3e 0d Data Ascii: <F T="10"> <O T="EQ"> <L> <S T="3" F="FileProtectionState" /> </L> <R> <V V="5" T="U32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="CountOfThrownException">
2024-11-22 00:29:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 72 65 73 75 6c 74 73 5f 49 73 4e 75 6c 6c 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 Data Ascii: <S T="5" F="results_IsNull" /> </L> <R> <V V="false" T="B" /> </R> </O> </L> <R> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:11 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a83a5f2-e01e-000c-157b-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002911Z-178bfbc474bxkclvhC1NYC69g4000000025g000000009c0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:11 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:11 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002911Z-174c587ffdfmrvb9hC1TEBtn3800000000rg0000000068mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:11 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:11 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9906faf6-f01e-0052-624b-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002911Z-15b8b599d889fz52hC1TEB59as00000000pg00000000a0ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:11 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 3029707a-401e-0047-3163-3b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002912Z-178bfbc474bfw4gbhC1NYCunf4000000024000000000uk3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:11 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: db42c49d-901e-007b-4a2f-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002912Z-178bfbc474brk967hC1NYCfu600000000230000000002zb5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:14 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:14 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 79f6ed77-701e-0021-554e-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002914Z-15b8b599d88pxmdghC1TEBux9c00000000ug000000007yg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:14 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:14 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:14 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:14 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: df8835e2-601e-0002-5b4e-3ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002914Z-15b8b599d88hd9g7hC1TEBp75c00000000p000000000ad67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:14 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:14 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:14 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 20caaba8-701e-005c-0363-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002914Z-178bfbc474b7cbwqhC1NYC8z4n00000002700000000021m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:14 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:14 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002914Z-174c587ffdfks6tlhC1TEBeza400000000ng00000000v9mx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:14 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 16d74281-d01e-0066-164b-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002914Z-15b8b599d885v8r9hC1TEB104g00000000tg0000000043th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:16 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:16 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: ae8c6dce-101e-008d-4280-3b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002916Z-174c587ffdfp4vpjhC1TEBybqw00000000kg00000000s6ee x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:16 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:16 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002916Z-178bfbc474bscnbchC1NYCe7eg00000002f0000000000z0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:16 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:16 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:16 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: a7985a29-001e-0046-374c-3cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002916Z-15b8b599d88z9sc7hC1TEBkr4w00000000s000000000ghqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:16 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:16 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:16 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:16 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002916Z-178bfbc474brk967hC1NYCfu60000000021g000000008px6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:16 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:16 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:16 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002916Z-178bfbc474bxkclvhC1NYC69g4000000026g0000000066r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49794	13.107.246.63	443	7436	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	207	OUT	GET /rules/rule120603v8s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:18 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:18 GMT Content-Type: text/xml Content-Length: 2128 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA41F3C62" x-ms-request-id: 40ea0a22-501e-008c-0d5a-3ccd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002918Z-15b8b599d88g5tp8hC1TEByx6w00000000sg000000000uff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:18 UTC	2128	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 33 22 20 56 3d 22 38 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 64 64 69 74 69 6f 6e 61 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 45 3d 22 66 61 6c 73 65 22 20 44 4c 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120603" V="8" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAdditional" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" E="false" DL=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:18 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:18 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 76e95f1f-101e-0034-7059-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002918Z-178bfbc474bwlrhlhC1NYCy3kg00000002a0000000001gpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:18 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:18 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002918Z-174c587ffdfcb7qhhC1TEB3x7000000000s000000000dpkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:18 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:18 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002918Z-178bfbc474bq2pr7hC1NYCkfgg00000002c000000000993x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:19 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:19 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:18 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2abfc2a9-b01e-003d-094d-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002918Z-15b8b599d88hr8sfhC1TEBbca400000000gg000000007bt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:19 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:18 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: c4abe473-d01e-008e-4d67-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002919Z-178bfbc474btvfdfhC1NYCa2en000000027g00000000gt8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:20 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4ec76ea5-a01e-006f-014e-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002920Z-178bfbc474bwlrhlhC1NYCy3kg000000023g00000000sz4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:20 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f47ed088-401e-0029-7f4d-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002921Z-15b8b599d88z9sc7hC1TEBkr4w00000000xg0000000009eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:20 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:21 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b6ecb1ee-501e-008f-3044-3c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002921Z-15b8b599d882zv28hC1TEBdchn00000000p0000000003tpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:20 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2b57feed-101e-0028-5221-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002921Z-178bfbc474bpnd5vhC1NYC4vr4000000025000000000k3r7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:21 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:21 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 38a668eb-401e-00ac-34a1-3b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002921Z-15b8b599d88hd9g7hC1TEBp75c00000000qg000000005myc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 90758f84-b01e-0021-4c46-3ccab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002923Z-15b8b599d88tmlzshC1TEB4xpn00000000f0000000008r04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 138215a1-101e-0017-6465-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002923Z-178bfbc474b9xljthC1NYCtw94000000020000000000we18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:23 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 3585b350-301e-005d-097c-3be448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002923Z-178bfbc474brk967hC1NYCfu6000000001wg00000000w5t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:23 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: ba3f3383-a01e-000d-6e55-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002923Z-15b8b599d88hd9g7hC1TEBp75c00000000gg00000000hgfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:23 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: a7625850-801e-007b-654c-3ce7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002923Z-15b8b599d88m7pn7hC1TEB4axw00000000q000000000exey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:25 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:25 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:25 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ca94d1e-301e-0000-0f9c-3beecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002925Z-174c587ffdftjz9shC1TEBsh9800000000m00000000059er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:25 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:25 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002925Z-178bfbc474bxkclvhC1NYC69g40000000260000000007hwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:25 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:25 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2deeee2f-b01e-001e-4967-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002925Z-178bfbc474bh5zbqhC1NYCkdug0000000250000000009ptx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:25 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:25 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:25 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002925Z-15b8b599d88l2dpthC1TEBmzr000000000rg0000000024kr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:25 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002925Z-15b8b599d88hd9g7hC1TEBp75c00000000pg000000008qw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 04c68412-701e-000d-5268-3b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002927Z-178bfbc474brk967hC1NYCfu6000000001yg00000000k91b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 957844e9-801e-008c-4868-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002927Z-178bfbc474b9fdhphC1NYCac0n000000021g00000000rty8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:27 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:28 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002928Z-178bfbc474b9fdhphC1NYCac0n0000000270000000003qhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:28 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ecab23c4-c01e-00ad-2963-3ba2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002928Z-178bfbc474bmqmgjhC1NYCy16c000000025g00000000tnrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:27 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 5f785e56-701e-0053-0854-3c3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002928Z-178bfbc474bpnd5vhC1NYC4vr4000000026g00000000c08g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:29 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002930Z-178bfbc474b9xljthC1NYCtw94000000020g00000000sntz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:29 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:30 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: de17e165-601e-0002-3161-3ba786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002930Z-178bfbc474bp8mkvhC1NYCzqnn000000023g000000005ww7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:30 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:29 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: fafd7d00-e01e-00aa-3a63-3bceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002930Z-178bfbc474bwh9gmhC1NYCy3rs000000026000000000tf76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:30 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:30 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002930Z-178bfbc474bscnbchC1NYCe7eg000000029g00000000mdf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:30 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:30 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f000c210-c01e-008d-4155-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002930Z-15b8b599d885ffrhhC1TEBtuv000000000sg000000008t4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:32 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:32 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002932Z-174c587ffdf89smkhC1TEB697s00000000u0000000005fbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:32 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:32 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:32 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 4e89b2fa-a01e-006f-563a-3c13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002932Z-15b8b599d88s6mj9hC1TEBur3000000000kg000000001cgg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:32 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:32 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1a92378f-b01e-005c-6f7b-3b4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002932Z-174c587ffdfcb7qhhC1TEB3x7000000000v0000000002ms2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:32 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:33 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 1e58b78d-401e-0029-678d-3b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002932Z-174c587ffdfb5q56hC1TEB04kg00000000kg00000000d5ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:32 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:33 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5556881b-d01e-008e-6531-3c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002933Z-178bfbc474bvjk8shC1NYC83ns000000021000000000eap5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:33 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:34 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:35 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:34 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: efe1277d-c01e-008d-7f4b-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002934Z-15b8b599d886w4hzhC1TEBb4ug00000000t0000000006884 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:35 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:34 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:35 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:34 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: a3dd353e-a01e-0032-2c4e-3c1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002934Z-178bfbc474bpscmfhC1NYCfc2c00000000wg0000000020vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:35 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:34 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:34 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e6bcc5b6-c01e-0046-7064-3b2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002934Z-178bfbc474b9xljthC1NYCtw94000000025g000000006n4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:35 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:34 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:35 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:35 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e7fd51b1-801e-0067-1163-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002935Z-178bfbc474bwlrhlhC1NYCy3kg000000024000000000rymx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:35 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:35 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:35 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:35 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 21def030-601e-0084-7c7b-3b6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002935Z-174c587ffdfcb7qhhC1TEB3x7000000000t0000000009ahy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:35 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:37 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:37 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002937Z-178bfbc474bp8mkvhC1NYCzqnn0000000230000000007uvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:37 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:37 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002937Z-178bfbc474bgvl54hC1NYCsfuw000000024000000000n48a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:37 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:37 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d2879cce-801e-0047-5869-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002937Z-178bfbc474bnwsh4hC1NYC2ubs00000002ag000000007css x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:37 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:37 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002937Z-178bfbc474b9fdhphC1NYCac0n000000027g00000000246x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:37 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:37 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002937Z-178bfbc474brk967hC1NYCfu6000000001zg00000000ekmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:39 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:39 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002939Z-174c587ffdftv9hphC1TEBm29w00000000h000000000cq5h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:39 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:39 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1a87898e-001e-002b-2066-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002939Z-178bfbc474bnwsh4hC1NYC2ubs000000029g00000000a675 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:39 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:39 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:39 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: cb31e276-601e-00ab-1151-3c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002939Z-15b8b599d889gj5whC1TEBfyk000000000e0000000001vd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:39 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:39 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:39 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:39 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 16dd49bc-d01e-0066-804e-3cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002939Z-178bfbc474bgvl54hC1NYCsfuw000000024g00000000hc7e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:39 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:39 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:40 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:39 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 11574f01-801e-0067-6559-3cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002939Z-174c587ffdfcb7qhhC1TEB3x7000000000r000000000ha6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:41 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:41 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:41 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: c76163b7-601e-0070-0647-3ca0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002941Z-178bfbc474bp8mkvhC1NYCzqnn000000020000000000hvws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:41 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:41 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:41 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 008b0be1-f01e-001f-587c-3b5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002941Z-174c587ffdfmlsmvhC1TEBvyks00000000r000000000vb4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:41 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:41 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:41 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:41 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b43d4aba-301e-0020-1845-3c6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002941Z-178bfbc474bwh9gmhC1NYCy3rs00000002ag0000000071ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:41 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:41 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:42 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3272c5ec-601e-003d-7d76-3b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002941Z-174c587ffdfks6tlhC1TEBeza400000000qg00000000k16d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:41 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:42 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 45806a8e-701e-003e-807c-3b79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002942Z-174c587ffdfmrvb9hC1TEBtn3800000000hg00000000rv4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:44 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 529557e1-c01e-0079-5045-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002943Z-15b8b599d882zv28hC1TEBdchn00000000hg0000000083bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e7fe902a-801e-0067-6164-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002943Z-178bfbc474bq2pr7hC1NYCkfgg00000002f000000000120a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: bac6914c-b01e-0002-4559-3c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002944Z-15b8b599d8885prmhC1TEBsnkw00000000vg000000004pf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:44 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 48f36a6e-501e-0047-4f4c-3cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002944Z-15b8b599d88qw29phC1TEB5zag00000000t000000000029y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:44 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:44 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002944Z-178bfbc474b9xljthC1NYCtw94000000025g000000006nqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:45 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:46 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 38659630-901e-008f-15a0-3b67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002946Z-15b8b599d88f9wfchC1TEBm2kc00000000x0000000001mh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:45 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:46 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:46 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002946Z-178bfbc474bgvl54hC1NYCsfuw000000024000000000n58d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:46 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:46 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:46 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:46 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002946Z-174c587ffdf9xbcchC1TEBxkz400000000hg00000000600g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:46 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:46 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:46 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:46 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002946Z-174c587ffdf59vqchC1TEByk6800000000sg00000000m11a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:46 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:46 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:47 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c7391ddf-401e-0064-3568-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002946Z-174c587ffdfb485jhC1TEBmc1s00000000f00000000012sr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:47 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:48 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:48 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:48 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 44a56bea-901e-0064-626a-3be8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002948Z-178bfbc474bwlrhlhC1NYCy3kg000000023000000000xknc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:48 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:48 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:48 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 119e228c-001e-0046-1663-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002948Z-178bfbc474b9fdhphC1NYCac0n000000025000000000afd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:48 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:48 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:48 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: efcbc6c0-c01e-008d-3f44-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002948Z-15b8b599d88qw29phC1TEB5zag00000000mg00000000gebe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:48 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:49 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 652d7de6-201e-0033-5d3c-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002948Z-15b8b599d88f9wfchC1TEBm2kc00000000r000000000pkr0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:48 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:49 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:49 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002949Z-174c587ffdf7t49mhC1TEB4qbg00000000kg00000000bcfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:49 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:50 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:50 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 650b08ff-201e-0033-5b2f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002950Z-178bfbc474bpnd5vhC1NYC4vr4000000025g00000000g4w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:50 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:50 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002950Z-178bfbc474bv7whqhC1NYC1fg4000000026g00000000csmv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:50 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:51 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 18ec886b-801e-0078-7044-3cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002950Z-15b8b599d88cn5thhC1TEBqxkn00000000e0000000007rqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:50 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:51 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002951Z-178bfbc474bwlrhlhC1NYCy3kg0000000290000000004uyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:51 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:51 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002951Z-178bfbc474brk967hC1NYCfu6000000001x000000000tf8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:52 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:53 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002953Z-174c587ffdfmrvb9hC1TEBtn3800000000rg000000006amc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:52 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:53 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002953Z-178bfbc474b9xljthC1NYCtw94000000023000000000f5v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:52 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:53 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 3b38473f-101e-007a-2bbc-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002953Z-15b8b599d8885prmhC1TEBsnkw00000000u00000000093a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:52 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:53 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a1d7de20-e01e-0051-6948-3c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002953Z-178bfbc474b7cbwqhC1NYC8z4n00000002700000000023vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:53 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:53 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:53 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002953Z-174c587ffdfldtt2hC1TEBwv9c00000000e00000000028u0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:53 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:55 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:55 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:55 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002955Z-174c587ffdfp4vpjhC1TEBybqw00000000qg000000008yws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:55 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:55 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:55 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:55 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 607d0db8-301e-0052-4363-3b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002955Z-178bfbc474brk967hC1NYCfu60000000022g000000005h2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:55 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:55 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:55 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:55 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: f92a0347-601e-005c-7f58-3cf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002955Z-15b8b599d88wk8w4hC1TEB14b800000000r000000000af9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:55 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:55 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:55 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 6d8f64b9-901e-005b-763b-3c2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002955Z-178bfbc474bmqmgjhC1NYCy16c000000027000000000mpf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:55 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:55 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:56 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:56 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c70c13b9-401e-0064-2959-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002956Z-178bfbc474btvfdfhC1NYCa2en00000002ag000000007g5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:56 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:57 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:57 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002957Z-178bfbc474bvjk8shC1NYC83ns00000001z000000000qs21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:57 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:58 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:58 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 23fc118c-601e-0084-474e-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002957Z-178bfbc474bq2pr7hC1NYCkfgg000000027g00000000ut9w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:58 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:57 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:58 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:57 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 0ac0d454-901e-0015-334f-3cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002957Z-15b8b599d88g5tp8hC1TEByx6w00000000p0000000009psp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:57 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:58 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002958Z-178bfbc474bfw4gbhC1NYCunf400000002800000000088d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:29:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:58 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:29:58 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:29:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 8149a5d6-a01e-001e-117b-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T002958Z-174c587ffdfx984chC1TEB676g00000000rg000000005gyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:29:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:29:59 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:00 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:00 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c87fa586-301e-0052-7045-3c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003000Z-174c587ffdfcj798hC1TEB9bq400000000vg000000009eer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:00 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:00 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:01 UTC	495	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:00 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: e8ec328a-c01e-0049-1675-3cac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003000Z-174c587ffdf4zw2thC1TEBu34000000000u000000000653p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-22 00:30:01 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:00 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:00 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:00 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 627e99eb-a01e-0084-2049-3c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003000Z-15b8b599d88tr2flhC1TEB5gk400000000q000000000r26s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:00 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:00 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:00 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:00 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003000Z-178bfbc474bgvl54hC1NYCsfuw000000029g000000001hu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:00 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:00 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:00 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:00 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: f390f01b-d01e-0017-588c-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003000Z-15b8b599d885ffrhhC1TEBtuv000000000t0000000006gzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:00 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:02 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:02 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: abaff5aa-901e-0064-6d47-3ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003002Z-178bfbc474bbcwv4hC1NYCypys000000025g000000000za1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:02 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:03 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:02 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: efdb4ccc-c01e-008d-7649-3c2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003002Z-15b8b599d886w4hzhC1TEBb4ug00000000s0000000009g8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:03 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:02 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:03 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: ca47fefa-001e-0014-1746-3c5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003002Z-178bfbc474brk967hC1NYCfu60000000023g000000001qkf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:02 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:03 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:03 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 1ebeca68-b01e-0002-5b8c-3a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003003Z-178bfbc474brk967hC1NYCfu60000000020g00000000bc6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:03 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:04 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:04 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:04 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 925d8d5d-601e-005c-498d-3bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003004Z-174c587ffdfks6tlhC1TEBeza400000000qg00000000k24m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:04 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:04 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:05 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:05 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 3373e1cf-a01e-006f-7cb9-3b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003005Z-15b8b599d889fz52hC1TEB59as00000000p000000000ax96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:05 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:04 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:05 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:05 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 3f34169e-201e-006e-177c-3bbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003005Z-174c587ffdfb74xqhC1TEBhabc00000000s00000000047bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:05 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:05 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:05 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:05 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 04da812a-201e-006e-55ee-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003005Z-178bfbc474b9xljthC1NYCtw940000000270000000001k9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:05 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:05 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:06 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:05 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: cd483c2e-401e-0048-1149-3c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003005Z-178bfbc474bbcwv4hC1NYCypys000000022g00000000b158 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:06 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:06 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:07 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 53292346-001e-005a-6f76-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003007Z-174c587ffdfp4vpjhC1TEBybqw00000000rg000000005p2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:07 UTC	192	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:08 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:07 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: 0049b6dc-c01e-000b-7e45-3ce255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003007Z-178bfbc474bv587zhC1NYCny5w000000023g000000008hrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:30:08 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:30:07 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:30:08 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:30:07 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 7916e896-401e-0035-0b67-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T003007Z-178bfbc474bxkclvhC1NYC69g4000000022000000000ptux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:30:08 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Target ID:	0
Start time:	19:27:58
Start date:	21/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0xe50000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	19:29:01
Start date:	21/11/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff69a0a0000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	19:29:02
Start date:	21/11/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff69a0a0000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of open application windows. Window listings could convey information about how the system is used.For example, information about application windows could be used identify potential data to collect as well as identifying security tooling ( Security Software Discovery ) to evade.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report HOLT EXPERIMENTAL_07710714-20241025.xlsx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\DF79B100.png

C:\Users\user\Desktop\~$HOLT EXPERIMENTAL_07710714-20241025.xlsx

Static File Info

General

File Icon

Static OLE Info

General

OLE File "HOLT EXPERIMENTAL_07710714-20241025.xlsx"

Indicators

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: EXCEL.EXEPID: 7436, Parent PID: 752

General

Chronological Activities

Windows Analysis Report
HOLT EXPERIMENTAL_07710714-20241025.xlsx