Edit tour

Windows Analysis Report
http://static.twalls5280.com

Overview

General Information

Sample URL:	http://static.twalls5280.com
Analysis ID:	1653532
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6240 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2100,i,6597147279751173296,7027877328382044137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://static.twalls5280.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-01T11:30:12.236808+0200	2060948	1	Domain Observed Used for C2 Detected	192.168.2.17	61674	1.1.1.1	53	UDP
2025-04-01T11:30:12.236982+0200	2060948	1	Domain Observed Used for C2 Detected	192.168.2.17	60644	1.1.1.1	53	UDP
2025-04-01T11:30:12.249170+0200	2060948	1	Domain Observed Used for C2 Detected	192.168.2.17	50375	1.1.1.1	53	UDP
2025-04-01T11:30:12.249439+0200	2060948	1	Domain Observed Used for C2 Detected	192.168.2.17	57196	1.1.1.1	53	UDP

ET MALWARE TA569 Staging Server Domain in TLS SNI (static .twalls5280 .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-01T11:30:12.843015+0200	2060949	1	Domain Observed Used for C2 Detected	192.168.2.17	49717	45.32.199.48	443	TCP
2025-04-01T11:30:14.732616+0200	2060949	1	Domain Observed Used for C2 Detected	192.168.2.17	49724	45.32.199.48	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://static.twalls5280.com

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://twalls5280.com/favicon.ico	Avira URL Cloud: Label: malware
Source: https://twalls5280.com	Avira URL Cloud: Label: malware

Source: https://static.twalls5280.com/	HTTP Parser: No favicon
Source: https://twalls5280.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 45.32.199.48:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49912 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2060948 - Severity 1 - ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com) : 192.168.2.17:60644 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2060948 - Severity 1 - ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com) : 192.168.2.17:61674 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2060948 - Severity 1 - ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com) : 192.168.2.17:50375 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2060948 - Severity 1 - ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com) : 192.168.2.17:57196 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2060949 - Severity 1 - ET MALWARE TA569 Staging Server Domain in TLS SNI (static .twalls5280 .com) : 192.168.2.17:49717 -> 45.32.199.48:443
Source: Network traffic	Suricata IDS: 2060949 - Severity 1 - ET MALWARE TA569 Staging Server Domain in TLS SNI (static .twalls5280 .com) : 192.168.2.17:49724 -> 45.32.199.48:443

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: static.twalls5280.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: static.twalls5280.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.twalls5280.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Ftwalls5280.com&oit=3&cp=8&pgcl=4&gs_rn=42&psi=1pQC7e3ctI0B7A_l&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLf3ygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: twalls5280.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: twalls5280.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://twalls5280.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: twalls5280.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft

Source: global traffic	DNS traffic detected: DNS query: static.twalls5280.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: twalls5280.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 01 Apr 2025 09:30:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 01 Apr 2025 09:30:48 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 209Connection: closeServer: ApacheAge: 0

Source: chromecache_48.1.dr

String found in binary or memory: https://twalls5280.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915

Source: unknown	HTTPS traffic detected: 45.32.199.48:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.17:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.96.147.103:443 -> 192.168.2.17:49912 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7092_1889439059

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7092_1889439059

Jump to behavior

Source: classification engine

Classification label: mal64.win@23/8@10/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2100,i,6597147279751173296,7027877328382044137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://static.twalls5280.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2100,i,6597147279751173296,7027877328382044137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://static.twalls5280.com	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://twalls5280.com/favicon.ico	100%	Avira URL Cloud	malware
https://twalls5280.com	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
twalls5280.com	66.96.147.103	true	false	high
www.google.com	142.250.80.100	true	false	high
static.twalls5280.com	45.32.199.48	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false		high
https://static.twalls5280.com/	false		unknown
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://twalls5280.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700500v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120642v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702950v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120629v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120623v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120658v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703951v0s19.xml	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://twalls5280.com	chromecache_48.1.dr	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
45.32.199.48	static.twalls5280.com	United States	20473	AS-CHOOPAUS	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
66.96.147.103	twalls5280.com	United States	29873	BIZLAND-SDUS	false

Private

IP
192.168.2.17
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1653532
Start date and time:	2025-04-01 11:29:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://static.twalls5280.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@23/8@10/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.32.110, 172.253.122.84, 142.251.40.163, 142.250.80.78, 142.250.176.195, 23.1.62.115, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, otelrules.svc.static.microsoft, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://static.twalls5280.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	5.072370642048207
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwIgsozEr6VyF02xxdGzKQ8u8p+KqD:J0+oxBgsozR4F0+dgK4T
MD5:	B64E9F4E30FC4C43EEABA6D24F7BD0BD
SHA1:	27BB0E2C9054C27D6C9DBDEDB742E0ED91CF8095
SHA-256:	8E9D11DB7A2C91AD7F118E1157CC1A3C928FCD24A7F99E18F87CF5CD0B8977E8
SHA-512:	E8F5AD691E6B8FF4CE1152FD452A7A520F1E20ED7F915116EA539AB52623EBD14E0FF935A3DBFB8A305C1C25D94AE9F0FC5F7FD9B5734CF11011465ECF61A5FB
Malicious:	false
Reputation:	low
URL:	https://twalls5280.com/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access /.on this server.<br />.</p>.</body></html>.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	203
Entropy (8bit):	5.139523437629011
Encrypted:	false
SSDEEP:	6:pn0+t9xqObRKr6TQzetSzRx3G0CezowoG:J0+t9xqeRKWTQzetSzRxGezn
MD5:	A368EBDB8002FBB3142E16BC34B326D8
SHA1:	E727C702FB6BE3CBEFA0B0847717B2334CE9B8FD
SHA-256:	7BB4BE9184710E7D3067CE155A3F8E37C248BDF649906EA40AF66A324ACE61A4
SHA-512:	2550B4B0040F566D106E24E8180DE41225FEDA5B82C68A31BC7DBCF422B6751CC1701CD3F1CC51A7FFDBD57FDCDCCABF1F3B6444AFDA681221F8E6F734C40DAD
Malicious:	false
Reputation:	low
URL:	https://static.twalls5280.com/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html><head>..<title>404 Not Found</title>..</head><body>..<h1>Not Found</h1>..<p>The requested URL was not found on this server.</p>..</body></html>..

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	4.75839965955622
Encrypted:	false
SSDEEP:	3:Vw2aEJJJitwwBHsLpYJWriFGWjLwWkzXFETH1u4:Vw2aE8t5BHsL2YriFGAwWeXFEL13
MD5:	0C46DA16306BD9C121FB5C0CEE9E1DCE
SHA1:	82E8B9DC2C2D3F675AF1CB6EABAA5D0453D78A8F
SHA-256:	5FFB95999C770471D2275FF68AE69AC3C942AEFEBED2DAECA8199EA4CDC0CAB2
SHA-512:	A125135E41671FE174093E2388AC758632E157FB3FD4F3EEDEEAFD3043AE876B5337541A173AC9B0AD9AE12A2DBB6EE5957A8C1F69E70E461BD0B9BA914E1C12
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Ftwalls5280.com&oit=3&cp=8&pgcl=4&gs_rn=42&psi=1pQC7e3ctI0B7A_l&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["https://twalls5280.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5182)
Category:	downloaded
Size (bytes):	5187
Entropy (8bit):	5.822688575061405
Encrypted:	false
SSDEEP:	96:zURSVlGFd666665JaVDrGHG+iT4/jVNj20YSv/5VL+HUyLzN5Pgwn2E5rmSBRFm1:QOGFd666665J2DrKjiyR20YWTgdgwN5i
MD5:	E8BD444CB875B32CEE64B17341C90CF6
SHA1:	39DEB15A7E1D4CA0BD32228A2B1F37AE73F6F268
SHA-256:	203063A0A54449042DF9749DABACBE4E4440D064C3F5C2E117E310913AD24580
SHA-512:	B86999612D0E9F8FC6896D50BA356759D7A1ABB3D8B0BEA5D9F2EE6D9916A2124407DA51A19CB7A081E4E91782940D5BFBD0CD69BBD866DDDC605B27D596EACD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["mr cooper mortgage rocket mortgage","spider man brand new day marvel","colorado rockies philadelphia phillies","spacex rocket launch","weather storms tornadoes","daily horoscope today","chipotle closing restaurants","student loans loan forgiveness"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-04-01T11:30:12.236808+0200	2060948	ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com)	1	192.168.2.17	61674	1.1.1.1	53	UDP
2025-04-01T11:30:12.236982+0200	2060948	ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com)	1	192.168.2.17	60644	1.1.1.1	53	UDP
2025-04-01T11:30:12.249170+0200	2060948	ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com)	1	192.168.2.17	50375	1.1.1.1	53	UDP
2025-04-01T11:30:12.249439+0200	2060948	ET MALWARE TA569 Staging Server Domain in DNS Lookup (static .twalls5280 .com)	1	192.168.2.17	57196	1.1.1.1	53	UDP
2025-04-01T11:30:12.843015+0200	2060949	ET MALWARE TA569 Staging Server Domain in TLS SNI (static .twalls5280 .com)	1	192.168.2.17	49717	45.32.199.48	443	TCP
2025-04-01T11:30:14.732616+0200	2060949	ET MALWARE TA569 Staging Server Domain in TLS SNI (static .twalls5280 .com)	1	192.168.2.17	49724	45.32.199.48	443	TCP

Network Port Distribution

Total Packets: 2236
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 1, 2025 11:30:10.321173906 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:10.336977005 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:10.336977005 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:10.622814894 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:10.638871908 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:10.638921976 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:11.227878094 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:11.243843079 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:11.243877888 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:11.770582914 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:11.913261890 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:12.072803020 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:12.216813087 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:12.418165922 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.418220997 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.418298006 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.418437958 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.418452978 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.418838978 CEST	49718	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.418986082 CEST	49719	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.440850019 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:12.456906080 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:12.456906080 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:12.557410955 CEST	80	49718	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.557432890 CEST	80	49719	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.557533026 CEST	49718	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.558258057 CEST	49719	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.680622101 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:12.823832989 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:12.842917919 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.843014956 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.844238997 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.844255924 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.844578981 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:12.844961882 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:12.892302036 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:13.893820047 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:14.032824993 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:14.367276907 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.367388964 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.367443085 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.368619919 CEST	49717	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.368643045 CEST	443	49717	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.471462965 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.471503973 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.471589088 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.472223997 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.472239971 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.732330084 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.732615948 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.732640028 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.732913017 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:14.732918024 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:14.844863892 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:14.860867977 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:14.860903978 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:15.025286913 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:15.025357008 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:15.025450945 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:15.025924921 CEST	49724	443	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:15.025942087 CEST	443	49724	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:16.042618990 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.042675018 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:16.042776108 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.042891979 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.042907953 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:16.244484901 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:16.244570017 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.245955944 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.245966911 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:16.246293068 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:16.290810108 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:16.306817055 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:16.434813976 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:19.659806013 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:19.675837994 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:19.675895929 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:21.110827923 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:21.238831043 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:26.228653908 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:26.228732109 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:26.228821039 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:27.403518915 CEST	49728	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:27.403557062 CEST	443	49728	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:28.870065928 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:28.870099068 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:28.870260954 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:28.870445967 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:28.870457888 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.215137959 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.215223074 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.216877937 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.216886044 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.217284918 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.220844984 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.268266916 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.270831108 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 1, 2025 11:30:29.286870003 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 1, 2025 11:30:29.286895037 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 1, 2025 11:30:29.479564905 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.479624987 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.479670048 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.479754925 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.479773045 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.479862928 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.501804113 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.501852036 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.501957893 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.501965046 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.502099037 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.565809011 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.565855980 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.565897942 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.565911055 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.565958977 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.565975904 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.594681025 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.594732046 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.594916105 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.594916105 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.594923019 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.594980001 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.603004932 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.603065968 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.603121996 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.603127003 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.603167057 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.603188038 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.608975887 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.609006882 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.609051943 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.609055996 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.609093904 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.609112024 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.656313896 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.656382084 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.656505108 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.656532049 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.656649113 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.675009012 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.675057888 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.675162077 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.675168037 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.675295115 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.689749956 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.689771891 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.690026999 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.690032959 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.690121889 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.707226038 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.707268000 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.707432032 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.707438946 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.707556009 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.726506948 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.726526976 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.726656914 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.726664066 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.726850986 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.750483990 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.750515938 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.750663042 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.750669956 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.750832081 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.766417980 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.766443014 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.766482115 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.766488075 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.766520977 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.766544104 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.771033049 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.771138906 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.771168947 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.771234035 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.771246910 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.771260023 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.771265030 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.771327972 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.771332026 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817429066 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817472935 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817555904 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817600965 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817656994 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817698956 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817717075 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817740917 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817754984 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817766905 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817816019 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817884922 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.817900896 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.817987919 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818007946 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.818315983 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818372965 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.818401098 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818423033 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818433046 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.818487883 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818538904 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818553925 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:29.818608999 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:29.818624020 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.108958006 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.109560966 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.109600067 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.110086918 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.110094070 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.304228067 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.304707050 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.304862976 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.304909945 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.304929972 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.304943085 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.304949045 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.308124065 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.308202982 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.308305025 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.308465004 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.308501959 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.444506884 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.445179939 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.445199013 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.445715904 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.445719957 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.474395037 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.474869967 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.474896908 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.475394011 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.475408077 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.563774109 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.564209938 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.564244032 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.564692020 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.564697027 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.568165064 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.568434954 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.568451881 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.568856955 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.568872929 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.575577974 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.575892925 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.575963020 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.576423883 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.576438904 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.673078060 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.673109055 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.673172951 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.673182964 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.673212051 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.673391104 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.673404932 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.673414946 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.673419952 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.676233053 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.676315069 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.676397085 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.676574945 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.676605940 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.714776039 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.714842081 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.714932919 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.715080976 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.715096951 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.715130091 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.715136051 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.717371941 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.717394114 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.717462063 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.717608929 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.717622042 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.720830917 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 1, 2025 11:30:30.803080082 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.804219007 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.804339886 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.804364920 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.804377079 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.804410934 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.804416895 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.806473970 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.806489944 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.806565046 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.806689978 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:30.806703091 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:30.848896980 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 1, 2025 11:30:31.013153076 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.013211966 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.013268948 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.013461113 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.013477087 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.013490915 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.013497114 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.016552925 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.016580105 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.016650915 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.016840935 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.016854048 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.020771980 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.021219969 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.021238089 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.021894932 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.021899939 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.114734888 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.115184069 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.115227938 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.115695000 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.115700960 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.125777006 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.125828028 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.125955105 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.125966072 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.126025915 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.126121998 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.126136065 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.126147985 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.126152992 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.126163960 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.126167059 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.128607035 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.128643036 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.128722906 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.128880024 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.128892899 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.202158928 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.202493906 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.202558041 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.202593088 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.202604055 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.202615976 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.202621937 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.204750061 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.204782009 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.204853058 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.205002069 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.205014944 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.293901920 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.294349909 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.294368029 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.294475079 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.294533968 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.294590950 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.294729948 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.294744015 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.294754982 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.294759989 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.295001984 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.295007944 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.297252893 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.297281027 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.297353029 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.297486067 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.297496080 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.402980089 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.403350115 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.403374910 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.403872013 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.403877020 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.453372002 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.453844070 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.453903913 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.454307079 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.454322100 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.469691038 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.469979048 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.470042944 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.470079899 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.470087051 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.470098972 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.470103979 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.472299099 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.472340107 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.472420931 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.472570896 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.472589016 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.494066000 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.494404078 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.494424105 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.494812012 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.494817019 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.560739040 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.561188936 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.561254978 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.561671019 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.561683893 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.577116966 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.577258110 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.577318907 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.577445030 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.577459097 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.577470064 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.577476025 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.580171108 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.580231905 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.580328941 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.580476046 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.580511093 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.632273912 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.632347107 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.632411003 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.632539034 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.632539034 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.632579088 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.632603884 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.637217999 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.637275934 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.637362957 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.637510061 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.637553930 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.669938087 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.670279980 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.670341015 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.670372963 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.670386076 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.670399904 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.670403957 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.672580004 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.672595978 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.672655106 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.672811985 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.672823906 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.735418081 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.735907078 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.735975981 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.736022949 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.736022949 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.736048937 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.736076117 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.738125086 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.738153934 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.738238096 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.738384962 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.738392115 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.738810062 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.739176035 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.739200115 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.739593983 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.739600897 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.912343979 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.912734985 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.912781000 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.913042068 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.913216114 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.913245916 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.913259029 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.913304090 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.913304090 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.913304090 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.915540934 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.915572882 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.915652037 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.915781975 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.915797949 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.917030096 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.917334080 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.917356014 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.917726040 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.917732000 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.948568106 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.948893070 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.948918104 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:31.949383974 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:31.949389935 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.007245064 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.007726908 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.007741928 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.008179903 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.008183956 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.104882956 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.105731964 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.105950117 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107312918 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.107363939 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107363939 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107382059 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.107395887 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.107733011 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.107815027 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107853889 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107876062 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.107889891 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.107897997 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.108941078 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.108979940 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.109066963 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.109232903 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.109247923 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.110099077 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.110131979 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.110187054 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.110321999 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.110336065 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.141093016 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.142930984 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.142992020 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.143042088 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.143054008 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.143064976 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.143069983 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.145437956 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.145534039 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.145620108 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.145744085 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.145788908 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.203799963 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.203922987 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.204082012 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.204121113 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.204121113 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.204130888 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.204138041 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.206111908 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.206165075 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.206243992 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.206434011 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.206460953 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.207236052 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.207597971 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.207619905 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.208020926 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.208026886 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.221045017 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.221080065 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.387114048 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.387326002 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.387453079 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.387479067 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.387492895 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.387691975 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.387697935 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.390429974 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.390469074 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.390571117 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.390712023 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.390727043 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.398591995 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.398943901 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.398971081 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.399348021 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.399353981 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.406517982 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.406899929 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.406913996 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.407310009 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.407315016 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.411088943 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.411391020 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.411462069 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.411729097 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.411741972 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.483086109 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.483475924 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.483513117 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.483783007 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.483794928 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.577451944 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.577887058 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.577961922 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.577992916 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.578003883 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.578015089 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.578021049 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.580436945 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.580455065 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.580519915 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.580627918 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.580641985 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.581566095 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.581705093 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.581804991 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.581804991 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.581804991 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.584073067 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.584093094 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.584157944 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.584265947 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.584276915 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.589519024 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.589806080 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.589871883 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.589937925 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.589937925 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.589968920 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.589993000 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.591976881 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.591986895 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.592055082 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.592207909 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.592220068 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.666425943 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.667087078 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.667211056 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.667264938 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.667283058 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.667408943 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.667423964 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.668049097 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.668454885 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.668473005 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.668840885 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.668845892 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.669934034 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.669958115 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.670023918 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.670150995 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.670165062 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.866930962 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.867336035 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.867358923 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.867671013 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.867856026 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.867861986 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.868022919 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.868036032 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.868457079 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.868460894 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.870970011 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.871236086 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.871248007 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.871594906 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.871598959 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.875200033 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.875370026 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.875427008 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.875446081 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.875446081 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.875457048 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.875464916 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.878119946 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.878185034 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.878263950 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.878396034 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.878442049 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.891840935 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.891845942 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.954546928 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.955084085 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.955106974 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:32.955564976 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:32.955571890 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.079375029 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.079533100 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.079696894 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.079899073 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.079899073 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.079912901 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.079921007 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.081579924 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.081897020 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.082015038 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.082185984 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.082190037 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.082201004 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.082206011 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.082832098 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.082866907 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.082936049 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.083080053 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.083095074 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.084438086 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.084445953 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.084511995 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.084613085 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.084625006 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.182723045 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.183474064 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.183517933 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.183963060 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.183979034 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.190941095 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.190994978 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.191046953 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.191184998 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.191199064 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.191207886 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.191212893 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193285942 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193341017 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193439007 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193526983 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193567038 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193629026 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193783045 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193837881 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193856955 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193866968 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.193873882 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.193877935 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.196312904 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.196330070 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.196396112 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.196489096 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.196501017 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.356794119 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.356885910 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.356977940 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.357196093 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.357242107 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.357271910 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.357289076 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.360234022 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.360276937 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.360361099 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.360517979 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.360532999 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.364576101 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.364970922 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.364998102 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.365406036 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.365412951 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.463462114 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.463901043 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.463969946 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.464457989 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.464474916 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.469562054 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.469942093 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.469968081 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.470330000 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.470335007 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.542783976 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.543055058 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.543128014 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.543149948 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.543164015 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.543173075 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.543178082 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.545964003 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.545994043 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.546099901 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.546288967 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.546304941 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.632025957 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.632389069 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.632411957 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.632764101 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.632770061 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.642337084 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.642394066 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.642467976 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.642616987 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.642652035 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.642678976 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.642693996 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.642760038 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.643086910 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.643102884 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.643630028 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.643634081 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.645591021 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.645615101 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.645648003 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.645723104 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.645874023 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.645881891 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.646466017 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.646528959 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.646550894 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.646564960 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.646575928 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.646581888 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.650527000 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.650592089 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.650682926 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.650846958 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.650876999 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.815455914 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.816044092 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.816231012 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.816231012 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.816231012 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.818511009 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.818545103 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.818629026 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.818799973 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.818811893 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826452971 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826481104 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826739073 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826827049 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.826828003 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.826843977 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.826849937 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826859951 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.826884985 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.826890945 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.827188015 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.827193022 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.829247952 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.829277992 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.829365969 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.829493046 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.829509020 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.928477049 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.928883076 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.928896904 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.929385900 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.929389954 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.934881926 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.935281038 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.935327053 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:33.935652018 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:33.935667038 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.011570930 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.012770891 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.012974024 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.012974024 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.012974024 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.016048908 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.016093969 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.016205072 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.016357899 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.016377926 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.118973970 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.119409084 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.119427919 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.119947910 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.119954109 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.120851994 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.120877028 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.123162031 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.123238087 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.123300076 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.123404026 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.123418093 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.123428106 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.123433113 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.126154900 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.126178026 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.126256943 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.126413107 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.126420021 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.130345106 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.131113052 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.131177902 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.131242037 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.131242037 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.131273031 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.131298065 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.133723974 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.133753061 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.133850098 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.133970022 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.133980989 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.300899982 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.301343918 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.301444054 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.301470041 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.301470041 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.301484108 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.301495075 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.304084063 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.304127932 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.304229021 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.304374933 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.304390907 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.316299915 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.316313982 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.406687021 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.407175064 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.407187939 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.407609940 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.407614946 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.411320925 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.411735058 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.411746979 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.412147045 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.412151098 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.431915045 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.432332993 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.432363033 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.432742119 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.432749033 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.587323904 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.587780952 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.587815046 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.588192940 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.588198900 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.592135906 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.592262030 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.592329025 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.592464924 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.592473030 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.592483044 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.592488050 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.595134974 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.595211029 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.595261097 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.596117020 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.596129894 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.596141100 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.596146107 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.598975897 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.599009991 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.599081993 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.600337029 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.600351095 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.602139950 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.602250099 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.602345943 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.603698969 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.603750944 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.611008883 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.611309052 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.611382961 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.611449003 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.611449003 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.611484051 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.611521959 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.614284992 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.614320040 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.614389896 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.614514112 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.614527941 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.779685020 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.780061960 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.780149937 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.780194044 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.780194044 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.780210018 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.780219078 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.783174992 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.783200979 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.783296108 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.783457994 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.783469915 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.876399994 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.876554966 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.876802921 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.876826048 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.876940966 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.876981974 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.877230883 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.877235889 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.877338886 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.877346039 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.896486998 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.896891117 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.896914005 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:34.897320032 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:34.897325039 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.064181089 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.065968990 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.066040039 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.066092968 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.066117048 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.066129923 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.066137075 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.066926003 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.067094088 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.067152977 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.067219973 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.067240000 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.067254066 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.067262888 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.068823099 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.068856955 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.068948984 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.069071054 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.069088936 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.069509983 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.069533110 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.069595098 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.069681883 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.069699049 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.070924044 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.071280003 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.071300983 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.071876049 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.071881056 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.100107908 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.100171089 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.100234985 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.100370884 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.100380898 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.100390911 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.100395918 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.102977991 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.103008986 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.103076935 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.103194952 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.103214025 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.270298004 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.270500898 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.270585060 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.270668983 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.270684958 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.270698071 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.270704031 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.274043083 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.274070978 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.274154902 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.274305105 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.274317026 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.374703884 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.375217915 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.375246048 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.375853062 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.375861883 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.414295912 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.414736032 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.414761066 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.415121078 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.415124893 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.564882040 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.565154076 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.565232992 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.565274000 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.565274000 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.565298080 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.565310001 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.568664074 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.568686962 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.568809032 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.568928957 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.568936110 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.576662064 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.577054024 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.577068090 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.577625990 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.577630997 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.597470999 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.598875046 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.598933935 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.598982096 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.598994970 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.599013090 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.599019051 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.602314949 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.602381945 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.602471113 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.602667093 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.602700949 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.699255943 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.699780941 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.699822903 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.700243950 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.700263977 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.760879040 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.760962963 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.761023998 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.761248112 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.761260033 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.761276960 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.761281013 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.764513969 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.764550924 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.764662981 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.764816046 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.764827013 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.838568926 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.839004040 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.839019060 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.839437962 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.839442015 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.874486923 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.874907970 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.874984980 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.875046968 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.875046968 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.875103951 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.875127077 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.878329039 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.878392935 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.878562927 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.878707886 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.878737926 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.882766962 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.883135080 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.883245945 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:35.883696079 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:35.883709908 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.029748917 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.029968977 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.030049086 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.030070066 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.030081987 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.030091047 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.030096054 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.033509970 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.033618927 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.033726931 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.033900976 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.033936024 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.045072079 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.045483112 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.045521975 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.045917988 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.045933962 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.076807022 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.077075958 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.077153921 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.077214956 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.077214956 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.077244043 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.077266932 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.080136061 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.080157995 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.080276966 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.080398083 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.080410004 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.125444889 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.125935078 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.126002073 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.126357079 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.126368999 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.180797100 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.181276083 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.181309938 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.181693077 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.181699038 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.238871098 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.238954067 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.239017010 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.239238977 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.239253044 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.239268064 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.239274979 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.242474079 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.242505074 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.242598057 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.242772102 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.242784023 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.320163965 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.326105118 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.326667070 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.326709986 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.327198982 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.327212095 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.338512897 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.338625908 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.338675022 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.338675022 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.338705063 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.338726044 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.341316938 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.341365099 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.341447115 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.341593027 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.341609001 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.363060951 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.363118887 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.363178015 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.363315105 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.363332033 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.363346100 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.363353968 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.365641117 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.365729094 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.365886927 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.366015911 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.366049051 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.384505033 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.384886980 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.384910107 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.385301113 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.385305882 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.501533031 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.502197027 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.502269983 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.502326012 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.502326012 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.502343893 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.502366066 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.505260944 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.505301952 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.505412102 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.505539894 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.505554914 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.510557890 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.510915995 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.510931015 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.511480093 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.511483908 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.560980082 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.561060905 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.561145067 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.561330080 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.561341047 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.561351061 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.561355114 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.564285040 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.564340115 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.564425945 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.564635992 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.564651966 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.613462925 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.613874912 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.613905907 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.614298105 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.614304066 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.634089947 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.634486914 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.634516954 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.635251999 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.635257959 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.692699909 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.692814112 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.692892075 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.693087101 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.693095922 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.693105936 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.693111897 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.696214914 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.696279049 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.696372032 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.696501017 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.696516991 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.778512001 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.779073954 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.779104948 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.779648066 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.779653072 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.792346954 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.793179989 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.793262959 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.793296099 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.793313026 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.793323994 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.793329000 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.796432972 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.796463013 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.796571016 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.796736956 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.796751976 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.815752029 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.816131115 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.816216946 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.816272974 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.816286087 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.816297054 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.816302061 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.818962097 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.818977118 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.819072962 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.819283009 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.819293022 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.834773064 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.835165977 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.835194111 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.835721016 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.835726023 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.956489086 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.957734108 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.957952023 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.957952023 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.957952023 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.960848093 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.960890055 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:36.960988998 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.961147070 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:36.961159945 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.017306089 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.017527103 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.017606974 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.017754078 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.017776966 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.017791986 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.017798901 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.021286964 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.021342039 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.021437883 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.021590948 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.021611929 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.090673923 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.091222048 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.091264009 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.091687918 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.091697931 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.234086037 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.234711885 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.234747887 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.235352993 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.235361099 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.253441095 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.253917933 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.253954887 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.254364967 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.254370928 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.264862061 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.264893055 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.283991098 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.284455061 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.284527063 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.284560919 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.284560919 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.284579992 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.284590960 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.287789106 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.287898064 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.288000107 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.288146019 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.288180113 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.412780046 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.413085938 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.413197994 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.413239956 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.413239956 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.413259983 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.413273096 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.416456938 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.416507006 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.416599989 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.416755915 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.416770935 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.428916931 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.429311991 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.429374933 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.429414034 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.429431915 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.429441929 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.429447889 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.432408094 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.432436943 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.432518959 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.432651043 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.432662964 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.562525034 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.563219070 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.563311100 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.563946009 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.563961029 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.731756926 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.732311010 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.732346058 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.732758999 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.732765913 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.749478102 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.749881983 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.749897003 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.750444889 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.750448942 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.773073912 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.773294926 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.773396015 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.773463964 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.773464918 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.773523092 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.773551941 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.777133942 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.777158022 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.777262926 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.777400017 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.777410030 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.907016039 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.907567978 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.907608032 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.908148050 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.908154011 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.916094065 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.916148901 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.916210890 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.916441917 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.916462898 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.916477919 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.916486025 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.919819117 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.919842005 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.919958115 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.920099020 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.920114040 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.943593025 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.944098949 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.944278002 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.944278002 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.944278002 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.947184086 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.947274923 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:37.947388887 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.947561026 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:37.947592974 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.087172985 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.087909937 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.087924004 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.088284016 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.088289022 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.254026890 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.254045963 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.261113882 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.261617899 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.261682034 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.262212038 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.262223959 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.276408911 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.276504040 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.276576996 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.276716948 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.276725054 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.276734114 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.276738882 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.279479027 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.279520988 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.279606104 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.279757023 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.279773951 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.368542910 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.368591070 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.368683100 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.369040966 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.369040966 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.369065046 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.369075060 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.372016907 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.372061014 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.372162104 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.372313976 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.372332096 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.418768883 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.419229031 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.419264078 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.419965982 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.419975996 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.445493937 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.445612907 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.445863008 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.446109056 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.446131945 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.446146965 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.446154118 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.450423956 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.450521946 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.450648069 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.450756073 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.450793982 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.604360104 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.605223894 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.605300903 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.605343103 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.605365992 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.605381012 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.605391026 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.609563112 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.609606028 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.609687090 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.609863043 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.609880924 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.652728081 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.653208971 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.653243065 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.653669119 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.653673887 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.737409115 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.737837076 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.737884045 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.738279104 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.738286018 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.828522921 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.828663111 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.828732014 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.828910112 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.828924894 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.828936100 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.828942060 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.884434938 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.884948015 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.884973049 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.885447979 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.885456085 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.913634062 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.913719893 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.913794994 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.913928986 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.913950920 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.913981915 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.913990974 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.947093010 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.947165966 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.947283030 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.948213100 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.948227882 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.948291063 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.948445082 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.948467016 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:38.948570013 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:38.948585987 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.287189960 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.287674904 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.287710905 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.287867069 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.288131952 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.288140059 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.288160086 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.288176060 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.288661957 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.288670063 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.375428915 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.375937939 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.375971079 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.376543045 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.376549006 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463090897 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463165998 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463229895 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463370085 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463388920 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463416100 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463423967 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463458061 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463481903 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463556051 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463567972 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463761091 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463778019 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463788986 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.463927031 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.463956118 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.464006901 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466475964 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466507912 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466517925 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.466547966 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.466599941 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466649055 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466726065 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466746092 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.466782093 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.466799021 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.560091019 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.560173988 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.560239077 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.560385942 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.560404062 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.560415983 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.560421944 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.561167002 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.561199903 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.561269045 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.561275005 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.561332941 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.561371088 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.561384916 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.561397076 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.561403990 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.563023090 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.563055992 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.563137054 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.563266039 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.563281059 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.563873053 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.563918114 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.563990116 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.564069033 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.564088106 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.566890955 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.567200899 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.567219973 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.567600965 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.567606926 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.740744114 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741169930 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.741204023 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741462946 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741473913 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741545916 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.741568089 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741611004 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.741621017 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741682053 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741703033 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.741715908 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741727114 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.741727114 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.741789103 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.742100954 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.742124081 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.742512941 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.742520094 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.744508028 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.744599104 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.744688988 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.744817972 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.744851112 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.841635942 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.842001915 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.842031956 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.842570066 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.842583895 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.846760035 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.847116947 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.847148895 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.847511053 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.847517967 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.920828104 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.920836926 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.920902967 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.920907974 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.920991898 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921046972 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921061993 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921073914 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921081066 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921088934 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921108007 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921166897 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921183109 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921237946 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921375036 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921430111 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.921523094 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921524048 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921545982 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.921561956 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.923290968 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.923327923 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.923408031 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.923537970 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.923546076 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.924299002 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.924341917 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:39.924410105 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.924496889 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:39.924510002 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.016895056 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.017030954 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.017096043 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.017127037 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.017144918 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.017158985 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.017167091 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.019273996 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.019299984 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.019376040 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.019520998 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.019527912 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.022205114 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.022572041 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.022648096 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.023288965 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.023303986 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.062014103 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.062248945 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.062306881 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.062339067 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.062354088 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.062366962 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.062371969 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.064601898 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.064630985 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.064714909 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.064842939 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.064857960 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.230642080 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.231046915 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.231065035 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.231422901 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.231426954 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.324212074 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.324675083 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.324692011 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.325273037 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.325278044 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.334800005 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.334855080 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.334919930 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.335102081 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.335141897 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.335189104 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.335205078 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.337977886 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.338022947 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.338114977 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.338236094 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.338263988 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.351824999 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.352185011 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.352216005 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.352554083 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.352560043 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.407926083 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.408437014 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.408500910 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.408549070 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.408562899 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.408576012 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.408580065 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.411439896 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.411462069 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.411545038 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.411711931 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.411724091 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.519681931 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.519771099 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.519853115 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.519953966 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.519974947 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.519992113 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.520001888 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.522587061 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.522624969 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.522703886 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.522850037 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.522865057 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.536933899 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.537235022 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.537297964 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.537333965 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.537347078 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.537370920 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.537375927 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.539535046 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.539556026 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.539625883 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.539724112 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.539736032 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.590418100 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.590794086 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.590822935 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.591414928 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.591419935 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.615061045 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.615483999 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.615561962 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.615978956 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.615993023 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.715090990 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.715617895 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.715648890 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.716214895 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.716219902 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.766078949 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.766160011 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.766227961 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.766426086 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.766447067 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.766462088 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.766468048 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.769762993 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.769805908 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.769938946 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.770143032 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.770155907 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.812014103 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.812165022 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.812278986 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.812391043 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.812391043 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.812432051 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.812460899 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.813888073 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.814342022 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.814377069 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.814976931 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.814992905 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.815387964 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.815433025 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.815509081 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.815748930 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.815762997 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.823462963 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.823812962 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.823851109 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.824326038 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.824332952 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.926604986 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.926801920 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.926865101 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.927023888 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.927038908 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.927052021 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.927058935 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.929706097 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.929732084 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:40.929847002 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.929991961 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:40.929999113 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.021524906 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.021600962 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.021687031 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.021841049 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.021869898 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.021898031 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.021913052 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.024414062 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.024446964 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.024553061 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.024672985 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.024694920 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.036322117 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.037133932 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.037189960 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.037208080 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.037228107 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.037307978 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.037328959 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.037341118 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.037360907 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.037364960 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.039670944 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.039689064 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.039776087 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.039890051 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.039902925 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.077759981 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.078172922 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.078186989 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.078599930 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.078603983 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.117469072 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.117974997 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.117995977 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.118570089 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.118575096 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.213542938 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.213977098 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.213990927 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.214401007 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.214406013 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.274559975 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.275856972 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.275943995 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.276005983 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.276005983 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.276029110 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.276038885 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.279325008 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.279390097 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.279500008 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.279681921 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.279711008 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.302882910 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.303147078 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.303200006 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.303204060 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.303250074 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.303299904 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.303314924 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.303324938 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.303329945 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.305671930 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.305762053 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.305870056 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.306041956 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.306065083 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.307394028 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.307801008 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.307813883 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.308414936 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.308419943 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.329206944 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.329576015 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.329601049 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.330122948 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.330127954 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.392124891 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.392184019 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.392237902 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.392412901 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.392425060 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.392433882 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.392438889 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.395652056 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.395692110 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.395790100 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.396074057 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.396104097 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.499859095 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.500287056 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.500382900 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.500420094 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.500437021 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.500447989 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.500452995 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.503736973 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.503787994 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.503896952 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.504077911 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.504091978 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.514413118 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.514552116 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.514617920 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.514719963 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.514729023 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.514744997 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.514749050 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.517388105 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.517415047 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.517505884 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.517669916 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.517687082 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.554965019 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.555908918 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.555953979 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.556533098 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.556545973 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.591655016 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.592086077 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.592118025 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.592645884 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.592653036 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.682531118 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.683168888 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.683202028 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.683738947 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.683744907 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.784778118 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.785012960 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.785079956 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.785125971 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.785146952 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.785161972 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.785170078 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.787130117 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.787586927 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.787626982 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.787941933 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.787993908 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.788070917 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.788206100 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.788233995 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.788336992 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.788348913 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.800095081 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.800529003 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.800549030 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.801101923 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.801107883 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.845648050 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.845671892 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.845710039 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.845746040 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.845791101 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.845911026 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.845911026 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.845946074 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.845972061 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.848237038 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.848287106 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.848376036 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.848566055 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.848592043 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.872730017 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.872837067 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.872901917 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.872987032 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.873003006 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.873013973 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.873018980 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.875456095 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.875472069 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.875543118 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.875721931 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.875735998 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.968276978 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.968480110 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.968543053 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.968605995 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.968636990 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.968655109 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.968662977 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.971513987 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.971539974 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.971616983 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.971728086 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.971744061 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.972681046 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:41.972742081 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:41.972846985 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:41.973094940 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:41.973110914 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:41.977349997 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.978091002 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.978146076 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.978168011 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.978215933 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.978251934 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.978262901 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.978285074 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.978291035 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.981154919 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.981193066 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:41.981271982 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.981404066 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:41.981420040 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.060106993 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.060659885 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.060678959 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.061234951 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.061239004 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.117027044 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.117575884 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.117608070 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.118195057 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.118202925 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.147495985 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.147969961 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.148010969 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.148519039 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.148526907 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.159095049 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.159392118 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.159411907 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.159563065 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.159571886 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.233818054 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.233958960 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.234025002 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.234189987 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.234236002 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.234266996 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.234285116 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.237507105 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.237536907 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.237617970 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.237792969 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.237806082 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.243464947 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.243872881 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.243891954 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.244389057 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.244394064 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.249982119 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.250370979 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.250399113 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.250952959 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.250960112 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.291882038 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.292346001 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.292388916 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.292399883 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.292450905 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.292491913 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.292510033 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.292526960 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.292534113 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.295084953 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.295119047 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.295206070 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.295344114 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.295355082 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.323224068 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.323558092 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.323635101 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.323667049 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.323667049 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.323684931 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.323694944 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.325859070 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.325884104 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.325988054 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.326134920 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.326142073 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.373918056 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.373966932 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.373996973 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.374043941 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.374056101 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.374103069 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.379753113 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.384310007 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.384373903 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.384378910 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.384429932 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.384474039 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.384596109 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.384605885 CEST	443	49840	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:42.384615898 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.384651899 CEST	49840	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:42.422630072 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.422703028 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.422768116 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.422923088 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.422935963 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.422949076 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.422955990 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.425685883 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.425717115 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.425838947 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.426007986 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.426018000 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.426292896 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.426417112 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.426476002 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.426500082 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.426512957 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.426525116 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.426531076 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.428978920 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.428997993 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.429105043 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.429208994 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.429219961 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.503985882 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.504368067 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.504384995 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.504918098 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.504923105 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.564356089 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.564800978 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.564822912 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.565392017 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.565402031 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.594505072 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.594881058 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.594897032 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.595422029 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.595427036 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.680440903 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.681435108 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.681498051 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.681504011 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.681586027 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.681624889 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.681646109 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.681658030 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.681663990 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.684345007 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.684439898 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.684567928 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.684700966 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.684734106 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.697276115 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.697721958 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.697735071 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.698376894 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.698381901 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.702116966 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.703314066 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.703336954 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.703821898 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.703826904 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.761522055 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.761584044 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.761655092 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.761864901 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.761878967 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.761890888 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.761898041 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.765719891 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.765762091 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.765912056 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.766093016 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.766108990 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.773510933 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.773582935 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.773648977 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.773746014 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.773755074 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.773763895 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.773767948 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.776241064 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.776285887 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.776413918 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.776545048 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.776562929 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.877777100 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.877837896 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.877966881 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.878106117 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.878127098 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.878139973 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.878144979 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.880481958 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.880944014 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.880985975 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.880990028 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.881056070 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881077051 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.881099939 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881105900 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.881160021 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881203890 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881216049 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.881227970 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881234884 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.881347895 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.881366968 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.883838892 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.883869886 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.883949041 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.884104013 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.884118080 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.954976082 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.955451012 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.955498934 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:42.956022978 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:42.956037045 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.038455963 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.039442062 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.039465904 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.039885044 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.039891005 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.040908098 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.041224957 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.041249990 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.041692972 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.041702032 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.132508993 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.137881041 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.137955904 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.138015985 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.138048887 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.138082981 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.138101101 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.140913963 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.140952110 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.141026020 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.141186953 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.141200066 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.150350094 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.150770903 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.150800943 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.151196003 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.151202917 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.163681030 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.164128065 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.164139986 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.164674997 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.164678097 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223212004 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223275900 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223328114 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223473072 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223493099 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223506927 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223514080 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223695993 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223782063 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223831892 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223929882 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223948002 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.223962069 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.223969936 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.226780891 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.226813078 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.226883888 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.226957083 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.226977110 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.227037907 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.227051973 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.227070093 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.227230072 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.227247000 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.324608088 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.324867010 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.324903965 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.324920893 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.324971914 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.325027943 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.325041056 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.325054884 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.325062037 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.328028917 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.328063965 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.328145981 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.328318119 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.328335047 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.340907097 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.341042042 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.341109037 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.341170073 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.341181993 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.341191053 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.341196060 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.343200922 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.343236923 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.343339920 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.343426943 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.343440056 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.414963007 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.415344954 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.415359020 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.415749073 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.415752888 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.498970985 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.501230955 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.501257896 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.503032923 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.503038883 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.506891966 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.507390976 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.507416964 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.509167910 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.509175062 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598067999 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598138094 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598249912 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598320007 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.598366022 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.598376989 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598387003 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.598392010 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598520994 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.598541021 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.598882914 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.598889112 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.601511955 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.601541042 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.601634979 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.601762056 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.601772070 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.614077091 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.614418983 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.614439011 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.614937067 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.614943027 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.675415993 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.675972939 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.676006079 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.676028967 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.676054001 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.676110029 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.676126957 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.676139116 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.676146030 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.678641081 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.678704977 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.678797007 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.679020882 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.679052114 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.686192036 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.686563969 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.686620951 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.686665058 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.686676979 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.686685085 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.686690092 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.689182043 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.689207077 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.689263105 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.689377069 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.689390898 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.769663095 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.769994974 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.770045996 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.770065069 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.770077944 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.770087957 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.770092964 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.773224115 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.773248911 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.773299932 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.773497105 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.773508072 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801501036 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801517963 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801573992 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.801594973 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801656961 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801696062 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.801793098 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.801805019 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.801817894 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.801821947 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.804704905 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.804739952 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.804826021 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.804984093 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.805006027 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.874696970 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.875122070 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.875150919 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.875675917 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.875682116 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.954207897 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.954701900 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.954777956 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.955262899 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.955276966 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.962898016 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.963367939 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.963460922 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:43.963941097 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:43.963958025 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.043050051 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.043489933 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.043530941 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.043998003 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.044008970 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.052046061 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.052153111 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.052217960 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.052421093 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.052440882 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.052459955 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.052469969 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.055737019 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.055763960 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.055850029 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.055995941 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.056013107 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.091031075 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.091506958 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.091531992 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.092056990 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.092061996 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.143421888 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.144334078 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.144391060 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.144396067 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.144454002 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.144494057 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.144514084 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.144530058 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.144536972 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.147773981 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.147804976 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.147881985 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.148061037 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.148102999 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.157352924 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.157423019 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.157510996 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.157630920 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.157644033 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.157655001 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.157659054 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.160348892 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.160398960 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.160473108 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.160636902 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.160656929 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.237144947 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.237175941 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.237221956 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.237235069 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.237277985 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.237407923 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.237426996 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.237483978 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.237497091 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.239865065 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.239900112 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.239965916 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.240123034 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.240138054 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.296969891 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.297060013 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.297137976 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.297621965 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.297648907 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.297687054 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.297700882 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.300230026 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.300271988 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.300345898 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.300487995 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.300504923 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.339329958 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.339929104 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.339958906 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.340389967 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.340396881 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.419070959 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.419615030 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.419631004 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.420073986 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.420078993 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.424846888 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.425240040 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.425275087 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.425688982 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.425698042 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.506253958 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.506885052 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.506903887 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.507339954 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.507344961 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.513427019 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.514664888 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.514715910 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.514724970 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.514780045 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.514852047 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.514869928 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.514885902 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.514893055 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.517868996 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.517914057 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.518024921 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.518197060 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.518213987 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.566905975 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.567368984 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.567399025 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.567920923 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.567928076 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.602385044 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.602658033 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.602725029 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.602761030 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.602773905 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.602785110 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.602788925 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.602907896 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.605600119 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.605671883 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.605704069 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.605724096 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.605736017 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.605742931 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.606137037 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.606162071 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.606236935 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.606481075 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.606497049 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.608784914 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.608829021 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.608933926 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.609101057 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.609112024 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.729346037 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.729789972 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.729854107 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.729891062 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.729904890 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.729914904 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.729921103 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.732959986 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.732984066 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.733087063 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.733252048 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.733264923 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.753892899 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.753968000 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.754023075 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.754038095 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.754086018 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.754216909 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.754236937 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.754250050 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.754256964 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.757127047 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.757164001 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.757231951 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.757402897 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.757420063 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.798296928 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.798743963 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.798780918 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.799138069 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.799145937 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.871978045 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.872426987 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.872452974 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.872953892 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.872961044 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.874058962 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.874459028 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.874480009 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.874936104 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.874948978 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.973148108 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.973248005 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.973315954 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.973489046 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.973509073 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.973521948 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.973530054 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.976690054 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.976716995 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:44.976845026 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.977015018 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:44.977025032 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.018738985 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.019216061 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.019236088 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.019797087 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.019807100 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.041048050 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.041596889 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.041630030 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.042270899 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.042277098 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.048280001 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.048306942 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.048346996 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.048377991 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.048420906 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.048595905 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.048616886 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.048634052 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.048640966 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.049021006 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.049099922 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.049153090 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.049226046 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.049236059 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.049246073 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.049251080 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.051944017 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.051964998 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.051981926 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.052041054 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.052057981 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.052119970 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.052225113 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.052237034 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.052292109 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.052325964 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.211647034 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.211721897 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.211781979 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.211971045 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.211990118 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.212002039 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.212007999 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.215370893 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.215460062 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.215564966 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.215744972 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.215779066 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.232911110 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.265175104 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.265681982 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.265702963 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.266316891 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.266324997 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.273854017 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.273869991 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.273957968 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.273973942 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.273986101 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.274260998 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.274318933 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.274368048 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.276684999 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.276716948 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.276794910 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.276971102 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.276998997 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.336978912 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.337594032 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.337611914 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.337616920 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.337985992 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.338006973 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.338094950 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.338099957 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.338392019 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.338397980 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.439436913 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.440849066 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.440916061 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.440948963 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.440982103 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.441046953 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.441046953 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.441071987 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.441085100 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.443748951 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.443777084 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.443867922 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.443984985 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.443995953 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.493815899 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.494196892 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.494218111 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.494780064 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.494787931 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.522947073 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.522981882 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523030996 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523045063 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.523081064 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.523210049 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.523245096 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523272038 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.523287058 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523473024 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523571968 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.523637056 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.524172068 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.524172068 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.524188042 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.524198055 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.526020050 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526042938 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.526169062 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526309967 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526325941 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.526345015 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526387930 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.526474953 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526561975 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.526576996 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.542960882 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.543401003 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.543442011 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.543800116 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.543812037 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.671247005 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.671911955 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.671977043 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.672024965 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.672024965 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.672051907 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.672077894 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.674736023 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.674776077 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.674964905 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.674964905 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.675003052 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.721921921 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.722301006 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.722382069 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.722665071 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.722768068 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.722768068 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.722784042 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.722830057 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.722949028 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.722980976 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.723011971 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.723026037 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.725626945 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.725655079 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.725716114 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.725850105 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.725864887 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.811140060 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.811666012 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.811698914 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.812096119 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.812103033 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.812114000 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.812370062 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.812390089 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.812721968 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.812727928 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.916340113 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.916721106 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.916790962 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.916867018 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.916867018 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.916903973 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.916932106 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.919512987 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.919547081 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.919615030 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.919765949 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.919780970 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.938148022 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.938447952 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.938483000 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:45.938855886 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:45.938869953 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.002115965 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.003328085 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.003396988 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.003418922 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.003436089 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.003444910 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.003449917 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.003973961 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.004071951 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.004122019 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.004153013 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.004162073 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.004173040 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.004177094 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.005876064 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.005914927 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.005984068 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.006105900 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.006123066 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.006177902 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.006190062 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.006247997 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.006320000 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.006334066 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.012118101 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.012396097 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.012411118 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.012772083 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.012777090 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.128114939 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.128690958 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.128753901 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.128793955 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.128793955 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.128813982 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.128827095 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.131481886 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.131520033 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.131608963 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.131773949 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.131788015 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.229305029 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.230315924 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.230381966 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.230418921 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.230434895 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.230444908 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.230451107 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.232971907 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.232990026 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.233067036 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.233186960 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.233196974 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.417829037 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.418262959 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.418334007 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.418694019 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.418710947 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.426351070 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.426424980 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.426529884 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.426649094 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.426681995 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.508299112 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.508737087 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.508755922 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.509165049 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.509169102 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.598617077 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.598858118 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.598928928 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.599010944 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.599010944 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.599065065 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.599088907 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.602025986 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.602057934 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.602140903 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.602307081 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.602322102 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.614634037 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.614918947 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.614963055 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.615195036 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.615206003 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.684323072 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.684341908 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.684390068 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.684401989 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.684750080 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.684788942 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.684788942 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.684818029 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.684832096 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.684837103 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.686861992 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.686901093 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.686971903 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.687084913 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.687102079 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.824435949 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.827219009 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.827282906 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.827948093 CEST	49887	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:30:46.827992916 CEST	443	49887	142.250.80.100	192.168.2.17
Apr 1, 2025 11:30:46.865926981 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.866363049 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.866384029 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.866894007 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.866899967 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.943027973 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.943445921 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.943504095 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.943825960 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.943839073 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.951081991 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.951463938 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.951484919 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:46.951924086 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:46.951929092 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.048721075 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.049578905 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.049622059 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.049649954 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.049704075 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.049721003 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.049734116 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.049758911 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.049765110 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.052390099 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.052417994 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.052498102 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.052656889 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.052670002 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.130007982 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.138070107 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.138406992 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.138465881 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.138473988 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.138514042 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.138561010 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.138576984 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.138605118 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.138612032 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.140949965 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.141009092 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.141096115 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.141218901 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.141239882 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.143882036 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.143942118 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.143959045 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.143992901 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.144042015 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.144068956 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.144118071 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.144118071 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.144134998 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.144154072 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.145900011 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.145924091 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.145993948 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.146085978 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.146100044 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.277030945 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.277431965 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.277456999 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.277911901 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.277916908 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.286811113 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.287199020 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.287213087 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.287570953 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.287575006 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.325541019 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.325901985 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.325917959 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.326370001 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.326375008 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.414105892 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.415498972 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.415550947 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.415961027 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.415973902 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.417953968 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.418343067 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.418373108 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.418817997 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.418828011 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.459019899 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.459104061 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.459176064 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.459352016 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.459368944 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.459381104 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.459387064 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.462241888 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.462277889 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.462369919 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.462512016 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.462522984 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.465780973 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.466000080 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.466063976 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.466090918 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.466090918 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.466095924 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.466106892 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.468069077 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.468096018 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.468163967 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.468249083 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.468256950 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.506061077 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.506258965 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.506315947 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.506352901 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.506356955 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.506365061 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.506370068 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.508426905 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.508450985 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.508524895 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.508656025 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.508666992 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.598793030 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599235058 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599313021 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599349976 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599364042 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599373102 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599378109 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599514008 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599574089 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599622011 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599631071 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599680901 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599715948 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599720001 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.599729061 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.599731922 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.602258921 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602304935 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.602328062 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602379084 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.602382898 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602451086 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602533102 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602552891 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.602570057 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.602596045 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.669081926 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669106007 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.669172049 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669504881 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669511080 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.669563055 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669667959 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669680119 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.669759989 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.669770002 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.747052908 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.747487068 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.747519970 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.748207092 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.748214960 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.753793001 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.754137993 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.754156113 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.754512072 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.754518032 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.787652969 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.787976027 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.788011074 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.788400888 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.788408041 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.880712986 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.881077051 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.881114006 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.881577969 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.881587982 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.882582903 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.882667065 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.882728100 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.882900000 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.882919073 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.883100986 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.883166075 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.883444071 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.883450031 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.884346962 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.884352922 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.884665966 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.884959936 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.888123035 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.888128996 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.888533115 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.927952051 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.927968025 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.928025961 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.928050995 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.928081036 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.928231001 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.928262949 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.928278923 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.928287029 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.928308010 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:47.930644035 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.930706024 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.930784941 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.930924892 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.930952072 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.932060957 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.932089090 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.932128906 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.932135105 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.932176113 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.932275057 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.932290077 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.932301998 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.932307959 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.934079885 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.934117079 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.934185982 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.934267044 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.934278011 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.937850952 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:47.969608068 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.969634056 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.969677925 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.969710112 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.969744921 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.969856977 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.969868898 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.972028971 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.972050905 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:47.972127914 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.972264051 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:47.972274065 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.064779043 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.065156937 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.065232038 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.065265894 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.065289021 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.065303087 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.065310955 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.067293882 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.067922115 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.067954063 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.068025112 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.068164110 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.068180084 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.068345070 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.068393946 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.068419933 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.068419933 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.068435907 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.068447113 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.070396900 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.070432901 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.070494890 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.070641041 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.070655107 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.221647024 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.224795103 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.224812984 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.225414038 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.225419998 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.261517048 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.262309074 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.262335062 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.265889883 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.265894890 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.289710999 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.291711092 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.291729927 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.292494059 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.292499065 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.369355917 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.369916916 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.369940996 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.370313883 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.370321989 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.375094891 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.375480890 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.375499964 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.375941038 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.375946045 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.420420885 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.420574903 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.420638084 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.420742989 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.420759916 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.420773983 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.420780897 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.423877954 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.423917055 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.423996925 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.424114943 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.424124002 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.450758934 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.450818062 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.450879097 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.450984001 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.451004982 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.451020956 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.451029062 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.453248978 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.453263044 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.453327894 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.453459978 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.453474998 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.479950905 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.480386019 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.480436087 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.480437040 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.480483055 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.480514050 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.480531931 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.480544090 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.480549097 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.482580900 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.482598066 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.482676029 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.482795000 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.482805014 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.548604965 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.548645020 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.548697948 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.548741102 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.548758030 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.548857927 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.548872948 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.548887968 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.548894882 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.551029921 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.551067114 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.551136017 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.551284075 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.551295996 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.563021898 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.563226938 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.563287020 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.563314915 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.563327074 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.563339949 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.563345909 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.565393925 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.565413952 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.565490007 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.565613031 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.565625906 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.631020069 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.631120920 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.631177902 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.631921053 CEST	49900	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.631932020 CEST	443	49900	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.668534994 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.710705042 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.711184025 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.711208105 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.711709976 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.711715937 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.712265968 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.724148989 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.724504948 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.724539995 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.724904060 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.724910975 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.758203983 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.758658886 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.758678913 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.759171963 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.759177923 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.760977030 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.761101007 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.761149883 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.761575937 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.761595011 CEST	443	49899	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.761606932 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.761640072 CEST	49899	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.822041988 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.822444916 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.822468042 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.822875023 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.822880983 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.835408926 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.835830927 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.835844994 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.836399078 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.836404085 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.849677086 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.849721909 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.849827051 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.849993944 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:48.850003958 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:48.900341034 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.900412083 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.900464058 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.900633097 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.900649071 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.900660038 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.900666952 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.903462887 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.903501987 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.903645039 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.903690100 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.903697014 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.917882919 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.917912006 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.917958021 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.917958975 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.917994976 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.918174982 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.918174982 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.918186903 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.918195963 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.920479059 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.920515060 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.920584917 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.920731068 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.920746088 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.939193010 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.939265013 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.939317942 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.939435959 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.939445019 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.941585064 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.941621065 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:48.941689968 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.941788912 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:48.941804886 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.001250982 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.001353979 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.001409054 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.001487017 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.001497984 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.001507044 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.001513004 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.003802061 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.003833055 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.003901005 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.004041910 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.004055023 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.014034033 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.014105082 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.014153004 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.014229059 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.014240980 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.014252901 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.014259100 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.016347885 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.016395092 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.016472101 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.016583920 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.016602993 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.040996075 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.041059971 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:49.041465044 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:49.041471958 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.041781902 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.042017937 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:49.088272095 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.189554930 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.190709114 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.190731049 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.191184998 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.191198111 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.206712961 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.210768938 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.210793018 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.211061954 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.211067915 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.243462086 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.246799946 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.246819973 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.247107029 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.247112989 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.249946117 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.250005007 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.250072956 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:49.250547886 CEST	49912	443	192.168.2.17	66.96.147.103
Apr 1, 2025 11:30:49.250571012 CEST	443	49912	66.96.147.103	192.168.2.17
Apr 1, 2025 11:30:49.288652897 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.290741920 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.290759087 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.291161060 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.291166067 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.300641060 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.302812099 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.302829981 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.303143978 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.303148985 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.366250038 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.366944075 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.367022991 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.367048979 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.367048979 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.367067099 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.367072105 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.369674921 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.369703054 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.369836092 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.369915009 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.369923115 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.385859013 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.386596918 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.386639118 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.386710882 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.386801958 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.386815071 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.386827946 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.386832952 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.389391899 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.389437914 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.389559984 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.389698982 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.389718056 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.424664021 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.425036907 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.425141096 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.425398111 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.425410986 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.425419092 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.425426006 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.428148985 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.428200006 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.428286076 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.428452969 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.428472042 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.479691029 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.479747057 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.479792118 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.479855061 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.480014086 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.480014086 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.480025053 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.480036020 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.482579947 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.482616901 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.482705116 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.482825041 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.482842922 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.490464926 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.490782976 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.490869999 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.490902901 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.490915060 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.490925074 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.490928888 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.493057966 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.493091106 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.493155956 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.493307114 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.493321896 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.655719042 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.656281948 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.656299114 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.656605959 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.656611919 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.663975000 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.664314985 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.664341927 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.664722919 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.664731026 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.714379072 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.714729071 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.714755058 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.715109110 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.715115070 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.764053106 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.764504910 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.764524937 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.764959097 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.764965057 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.777098894 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.777493000 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.777523041 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.777889013 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.777899027 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.850270987 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.850303888 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.850359917 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.850414038 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.850650072 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.850650072 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.851967096 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.851991892 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.853473902 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.853504896 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.853575945 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.853765011 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.853776932 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.853960037 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.854191065 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.854253054 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.854285955 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.854285955 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.854301929 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.854314089 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.856303930 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.856312990 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.856415987 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.856518984 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.856532097 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.904010057 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.904036999 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.904089928 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.904103041 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.904133081 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.904289961 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.904304981 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.904320002 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.904325008 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.906696081 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.906732082 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.906820059 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.906960011 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.906969070 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.946726084 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.947045088 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.947117090 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.947139025 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.947154999 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.947170019 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.947176933 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.949400902 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.949425936 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.949492931 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.949620008 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.949635983 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986035109 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986061096 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986123085 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.986145973 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986159086 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986211061 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.986325979 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.986325979 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.986340046 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.986350060 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.988543034 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.988574028 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:49.988652945 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.988811016 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:49.988825083 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.162312031 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.162827015 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.162844896 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.163301945 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.163307905 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.200102091 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.200562000 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.200583935 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.200900078 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.200906038 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.275377989 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.275775909 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.275804043 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.276161909 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.276166916 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.345613003 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.345638990 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.345695019 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.345788956 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.345992088 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.346009016 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.346025944 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.346031904 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.349261045 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.349303961 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.349411011 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.349582911 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.349597931 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.379369974 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.379601002 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.379692078 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.379729986 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.379729986 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.379745960 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.379755974 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.383259058 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.383306026 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.383408070 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.383539915 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.383553982 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.461500883 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.462701082 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.462785959 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.462824106 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.462842941 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.462858915 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.462865114 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.466106892 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.466160059 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.466262102 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.466419935 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.466437101 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.631896973 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.634730101 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.634754896 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.636606932 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.636617899 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.664501905 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.664916992 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.664957047 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.665570974 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.665577888 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.750127077 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.750519991 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.750546932 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.751174927 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.751182079 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.815119028 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.815170050 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.815218925 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.815221071 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.815270901 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.815543890 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.815577030 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.815589905 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.815599918 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.818912029 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.818959951 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.819060087 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.819216967 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.819245100 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.844569921 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.845185041 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.845243931 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.845274925 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.845294952 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.845309019 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.845314980 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.848323107 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.848356009 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.848437071 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.848552942 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.848576069 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.925432920 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.925478935 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.925532103 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.925534964 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.925578117 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.925770998 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.925791025 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.925806999 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.925813913 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.928281069 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.928307056 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:50.928381920 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.928488970 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:50.928498030 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.098524094 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.099018097 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.099050045 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.099462032 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.099467039 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.133203983 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.133790016 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.133809090 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.134074926 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.134078979 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.220326900 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.220781088 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.220841885 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.221069098 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.221076965 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.287523985 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.288633108 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.288743973 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.290338039 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.290338039 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.290353060 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.290360928 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.291826963 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.291873932 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.291960955 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.292088985 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.292104006 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.313524008 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.313576937 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.313641071 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.313642979 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.313699961 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.313916922 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.313922882 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.313960075 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.313965082 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.316272974 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.316310883 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.316479921 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.316559076 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.316569090 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.397841930 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.398050070 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.398123026 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.398166895 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.398181915 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.398219109 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.398226976 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.400567055 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.400593042 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.400662899 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.400810957 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.400825977 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.533112049 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.533634901 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.533678055 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.534063101 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.534071922 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.543479919 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.544008970 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.544039011 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.544550896 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.544559002 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.584510088 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.584876060 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.584897041 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.585263014 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.585268021 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.606498003 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.606795073 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.606826067 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.607300997 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.607309103 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.670026064 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.670402050 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.670428991 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.670766115 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.670770884 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.710880041 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.710964918 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.711009979 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.711014986 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.711081028 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.711124897 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.711143017 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.711158037 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.711165905 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.713778019 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.713813066 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.713901997 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.714066029 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.714073896 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.726710081 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.727426052 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.727478981 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.727504969 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.727550030 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.727581978 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.727605104 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.727618933 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.727627993 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.730103016 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.730145931 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.730230093 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.730387926 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.730413914 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.760993004 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.761362076 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.761410952 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.761434078 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.761503935 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.761523962 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.761523962 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.761533022 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.761544943 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.764493942 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.764518976 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.764602900 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.764777899 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.764795065 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.796072006 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.796214104 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.796283960 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.796320915 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.796340942 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.796358109 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.796365023 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.798887968 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.798911095 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.799006939 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.799173117 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.799187899 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.860398054 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.860497952 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.860558033 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.860690117 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.860706091 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.860718012 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.860723019 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.863116026 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.863135099 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.863223076 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.863331079 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.863343000 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.984447002 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.984842062 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.984862089 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:51.985413074 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:51.985419989 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.012041092 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.012434959 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.012456894 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.012836933 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.012844086 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.035741091 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.036084890 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.036123991 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.036591053 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.036597967 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.067682028 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.068063021 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.068082094 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.068422079 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.068428040 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.133752108 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.134207964 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.134228945 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.134749889 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.134756088 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.172697067 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.172983885 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.173077106 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.173105955 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.173105955 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.173125982 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.173137903 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.176111937 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.176147938 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.176235914 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.176423073 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.176440954 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.230528116 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.265011072 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.265209913 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.265269041 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.265269041 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.265343904 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.265399933 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.265422106 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.265439987 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.265449047 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.267890930 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.267926931 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.268016100 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.268157959 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.268172026 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.280867100 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.280878067 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.280968904 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.280968904 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.280985117 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.281213999 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.281265020 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.281306982 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.283473015 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.283494949 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.283606052 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.283720970 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.283735991 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.333935022 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.334201097 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.334274054 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.334316015 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.334316015 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.334336042 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.334352016 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.336776018 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.336806059 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.336884975 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.337028980 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.337044001 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.467016935 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.467485905 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.467504978 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.467941046 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.467947006 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.534272909 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.534989119 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.535022974 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.535352945 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.535360098 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.575160027 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.575541973 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.575562954 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.575995922 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.576004028 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.607388973 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.607748985 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.607777119 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.607938051 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.607964993 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.608012915 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.608032942 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.608068943 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.608124971 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.608135939 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.608197927 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.608215094 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.608247995 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.608263969 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.610611916 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.610694885 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.610793114 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.610919952 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.610949039 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.652863979 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.652929068 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.652993917 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.653165102 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.653173923 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.653184891 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.653189898 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.655576944 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.655611038 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.655709982 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.655833006 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.655843973 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.727988005 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.753571033 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.753771067 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.753865004 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.753901005 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.753901005 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.753914118 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.753921986 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.756584883 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.756634951 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.756721973 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.756865025 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.756891012 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.774888992 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.774931908 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.775068998 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.775106907 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.775129080 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.775264978 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.775299072 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.775356054 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.777514935 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.777599096 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.777692080 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.778158903 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.778196096 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.801342964 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.801548004 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.801794052 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.801794052 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.801794052 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.803813934 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.803836107 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.803910971 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.804044962 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.804059982 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.894201040 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.894812107 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.894865036 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.895114899 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.895127058 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.941416025 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.942039013 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.942095995 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:52.942399979 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:52.942414999 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.044661045 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.046633005 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.046683073 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.048381090 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.048396111 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.051697969 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.052056074 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.052083969 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.052499056 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.052505016 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.070028067 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.070065022 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.070111990 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.070247889 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.070247889 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.070682049 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.070683002 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.070717096 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.070739985 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.075309992 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.075881958 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.075906992 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.076272964 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.076278925 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.076601028 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.076633930 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.076705933 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.076841116 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.076853037 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.108009100 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.108026981 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.117826939 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.119213104 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.119299889 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.119355917 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.119355917 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.119400978 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.119425058 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.121520042 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.121543884 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.121613979 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.121751070 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.121763945 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.235471964 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.235857010 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.235949039 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.235976934 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.236073017 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.236087084 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.236129999 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.236129999 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.236152887 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.238763094 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.238797903 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.238884926 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.239027977 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.239037991 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.244153023 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.244224072 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.244292974 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.244350910 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.244381905 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.244410038 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.244426012 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.246545076 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.246582031 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.246674061 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.246819019 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.246845007 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.272376060 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.272624016 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.272684097 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.272718906 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.272738934 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.272754908 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.272762060 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.274805069 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.274848938 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.274914026 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.275049925 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.275069952 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.365498066 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.365865946 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.365881920 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.366281986 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.366286039 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.400134087 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.400497913 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.400527954 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.400907040 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.400913954 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.518474102 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.518959999 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.518995047 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.519398928 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.519409895 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.519998074 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.520411015 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.520426035 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.520853043 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.520858049 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.540868044 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.541138887 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.541204929 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.541240931 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.541249990 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.541269064 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.541274071 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.542018890 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.542346954 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.542385101 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.542710066 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.542722940 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.543983936 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.544058084 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.544143915 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.544291973 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.544318914 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.577389002 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.577910900 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.577955961 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.577961922 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.578010082 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.578051090 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.578068018 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.578080893 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.578087091 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.580182076 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.580220938 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.580295086 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.580418110 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.580437899 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.704513073 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.704545021 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.704597950 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.704598904 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.704668045 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.704844952 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.704879999 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.704890966 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.704906940 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.707297087 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.707324982 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.707396030 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.707503080 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.707515001 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.711198092 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.712886095 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.712950945 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.712965965 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.712975025 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.712984085 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.712989092 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.715173960 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.715218067 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.715275049 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.715396881 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.715411901 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.728367090 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.728445053 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.728517056 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.728617907 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.728617907 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.728676081 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.728705883 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.730856895 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.730885983 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.730957031 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.731077909 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.731097937 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.824305058 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.825047016 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.825088024 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.827270985 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.827285051 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.851326942 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.851654053 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.851706982 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.852032900 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.852045059 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.981281996 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.981625080 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.981645107 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:53.982042074 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:53.982048035 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.007491112 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.007852077 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.007889032 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.008215904 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.008225918 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015024900 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015281916 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015322924 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015338898 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.015381098 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.015415907 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.015434027 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015446901 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.015455008 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.015741110 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.016069889 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.016088963 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.016444921 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.016449928 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.017987967 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.018022060 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.018094063 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.018230915 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.018245935 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.032799006 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.032856941 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.033024073 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.033024073 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.033024073 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.035420895 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.035449982 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.035526037 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.035631895 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.035648108 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.184139967 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.184216976 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.184272051 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.184422016 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.184422016 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.184441090 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.184449911 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.187063932 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.187103987 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.187175989 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.187300920 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.187309980 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.201590061 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.201889992 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.201956987 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.201997042 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.202013016 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.202028036 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.202034950 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.204476118 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.204493046 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.204557896 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.204710960 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.204725981 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.216379881 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.216411114 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.216456890 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.216464043 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.216501951 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.216603041 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.216603041 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.216619015 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.216626883 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.218656063 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.218682051 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.218750954 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.218911886 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.218921900 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.301666021 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.302052021 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.302083015 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.302522898 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.302529097 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.318903923 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.319338083 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.319360971 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.319664001 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.319669962 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.346884966 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.346931934 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.469723940 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.470230103 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.470251083 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.470544100 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.470550060 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.483891964 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.484467030 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.484534979 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.484580040 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.484600067 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.484611034 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.484616995 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.487327099 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.487348080 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.487432957 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.487577915 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.487591982 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.491128922 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.491439104 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.491467953 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.491818905 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.491826057 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.493333101 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.493685007 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.493700027 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.494080067 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.494085073 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.499933958 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.500314951 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.500375032 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.500407934 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.500416994 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.500425100 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.500430107 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.502695084 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.502716064 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.502788067 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.502923012 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.502937078 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.658116102 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.658193111 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.658246040 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.658363104 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.658381939 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.658394098 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.658401012 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.660399914 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.660417080 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.660486937 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.660600901 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.660613060 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.677450895 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.679498911 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.679657936 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.679657936 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.679657936 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.681581974 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.681610107 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.681679010 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.681777954 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.681785107 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.683339119 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.683909893 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.683963060 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.683983088 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.683990955 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.684015989 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.684020996 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.685874939 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.685923100 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.686012983 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.686101913 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.686119080 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.776417971 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.776850939 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.776873112 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.777159929 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.777165890 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.787324905 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.787657976 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.787679911 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.788033962 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.788039923 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.945107937 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.945545912 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.945565939 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.945993900 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.945998907 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.968264103 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.968777895 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.968844891 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.969003916 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.969005108 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.969029903 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.969042063 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.971440077 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.971491098 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.971573114 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.971707106 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.971723080 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.975949049 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.976134062 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.976296902 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.976345062 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.976494074 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.976512909 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.976711035 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.976726055 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.976878881 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.976882935 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.978065968 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.978131056 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.978189945 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.978266954 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.978280067 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.978290081 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.978295088 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.979877949 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.979898930 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.980314016 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.980345011 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:54.980413914 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.980540037 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:54.980554104 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.137474060 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.138432980 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.138480902 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.138535976 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.138564110 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.138621092 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.138639927 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.138679981 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.138688087 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.141047001 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.141117096 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.141194105 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.141355038 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.141385078 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.170078039 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.170366049 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.170429945 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.170603037 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.170603037 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.170610905 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.170619011 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.172347069 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.172595024 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.172648907 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.172652006 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.172715902 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.172755003 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.172755003 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.172779083 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.172801971 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.173310041 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.173332930 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.173398018 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.173556089 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.173568010 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.174931049 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.174953938 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.175013065 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.175123930 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.175139904 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.259295940 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.259778976 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.259798050 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.260107040 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.260113001 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.432817936 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.433382988 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.433425903 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.433882952 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.433895111 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.447815895 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.448232889 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.448410988 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.448410988 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.448410988 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.450930119 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.450957060 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.451035976 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.451148033 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.451160908 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.453126907 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.453433037 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.453449965 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.453816891 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.453821898 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.456562996 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.456896067 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.456918001 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.457281113 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.457287073 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.589590073 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.590071917 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.590125084 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.590528965 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.590539932 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.616413116 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.616632938 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.616797924 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.616797924 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.616797924 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.619461060 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.619534969 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.619642019 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.619785070 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.619807005 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.628940105 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.631059885 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.631119013 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.631279945 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.631279945 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.631295919 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.631304979 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.632546902 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.632792950 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.632867098 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.632894039 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.632909060 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.632920980 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.632929087 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.633372068 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.633413076 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.633481026 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.633606911 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.633620977 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.635118008 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.635202885 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.635287046 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.635404110 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.635432959 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.720101118 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.720449924 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.720468044 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.720841885 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.720846891 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.762864113 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.762922049 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.768989086 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.769179106 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.769218922 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.769232035 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.769274950 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.769313097 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.769313097 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.769336939 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.769361019 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.771477938 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.771496058 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.771564960 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.771688938 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.771704912 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898067951 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898340940 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898467064 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898502111 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898612022 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898649931 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898658037 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898703098 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898725986 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898744106 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898753881 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898760080 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.898864985 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.898878098 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.901071072 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.901103020 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.901166916 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.901312113 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.901326895 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.908265114 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.908566952 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.908581972 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.908920050 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.908924103 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.910938978 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.911257029 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.911284924 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.911616087 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.911622047 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:55.922893047 CEST	49973	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:55.922929049 CEST	443	49973	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.048646927 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.048999071 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.049019098 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.049351931 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.049356937 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.090050936 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.090681076 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.090754986 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.090846062 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.090846062 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.090884924 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.090912104 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.093130112 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.093177080 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.093270063 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.093374014 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.093390942 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098236084 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098728895 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098784924 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.098790884 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098820925 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.098820925 CEST	49978	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.098834991 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098845959 CEST	443	49978	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098856926 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098905087 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.098921061 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.098993063 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.099003077 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.099014997 CEST	49979	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.099066019 CEST	443	49979	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.101202011 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101223946 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.101295948 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101372004 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101393938 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101404905 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.101448059 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.101519108 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101591110 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.101613045 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.199832916 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.200227022 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.200248957 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.200742960 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.200748920 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.248490095 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.248608112 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.248771906 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.248773098 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.248773098 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.251308918 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.251382113 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.251477957 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.251590014 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.251605988 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.381730080 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.381869078 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.382033110 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.382033110 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.382034063 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.383213997 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.383578062 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.383603096 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.383989096 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.383996010 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.384484053 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.384516001 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.384589911 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.384717941 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.384731054 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.398722887 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.399013996 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.399032116 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.399537086 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.399540901 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.407496929 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.407804966 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.407851934 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.408150911 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.408164978 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.524429083 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.524910927 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.524979115 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.525332928 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.525346994 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.558857918 CEST	49980	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.558888912 CEST	443	49980	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.561497927 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.561599016 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.561659098 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.561799049 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.561820984 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.561847925 CEST	49982	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.561856031 CEST	443	49982	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.564533949 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.564560890 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.564646959 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.564817905 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.564829111 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.580339909 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.580413103 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.580461025 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.580538988 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.580549002 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.580563068 CEST	49983	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.580568075 CEST	443	49983	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.582701921 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.582714081 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.582807064 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.582937956 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.582950115 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.585479021 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.585642099 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.585714102 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.585773945 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.585773945 CEST	49984	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.585813046 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.585839987 CEST	443	49984	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.658721924 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.659154892 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.659177065 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.659727097 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.659739017 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.685889006 CEST	49981	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.685899973 CEST	443	49981	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.703560114 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.703607082 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.703658104 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.703660965 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.703711033 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.703944921 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.703978062 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.704006910 CEST	49985	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.704022884 CEST	443	49985	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.842716932 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.843130112 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.843143940 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.843569040 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.843574047 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.848097086 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.848172903 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.848241091 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.848361015 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.848361015 CEST	49986	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.848377943 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.848391056 CEST	443	49986	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.865304947 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.865643024 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.865658998 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:56.866028070 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:56.866033077 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.015691996 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.016300917 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.016460896 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.016460896 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.016460896 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.039757013 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.040822029 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.040875912 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.040925026 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.040941954 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.040952921 CEST	49988	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.040958881 CEST	443	49988	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.324870110 CEST	49987	443	192.168.2.17	13.107.246.40
Apr 1, 2025 11:30:57.324892044 CEST	443	49987	13.107.246.40	192.168.2.17
Apr 1, 2025 11:30:57.564891100 CEST	49718	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:57.565051079 CEST	49719	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:30:57.691688061 CEST	80	49718	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:57.691704035 CEST	80	49719	45.32.199.48	192.168.2.17
Apr 1, 2025 11:30:57.868998051 CEST	49706	80	192.168.2.17	142.251.40.195
Apr 1, 2025 11:30:57.869200945 CEST	49708	80	192.168.2.17	199.232.38.172
Apr 1, 2025 11:30:57.953888893 CEST	80	49706	142.251.40.195	192.168.2.17
Apr 1, 2025 11:30:57.953948021 CEST	49706	80	192.168.2.17	142.251.40.195
Apr 1, 2025 11:30:57.954603910 CEST	80	49708	199.232.38.172	192.168.2.17
Apr 1, 2025 11:30:57.954613924 CEST	80	49708	199.232.38.172	192.168.2.17
Apr 1, 2025 11:30:57.954751968 CEST	49708	80	192.168.2.17	199.232.38.172
Apr 1, 2025 11:31:12.689130068 CEST	80	49718	45.32.199.48	192.168.2.17
Apr 1, 2025 11:31:12.689178944 CEST	80	49719	45.32.199.48	192.168.2.17
Apr 1, 2025 11:31:12.689237118 CEST	49718	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:31:12.689265013 CEST	49719	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:31:13.398669958 CEST	49719	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:31:13.398706913 CEST	49718	80	192.168.2.17	45.32.199.48
Apr 1, 2025 11:31:13.529263973 CEST	80	49719	45.32.199.48	192.168.2.17
Apr 1, 2025 11:31:13.529309988 CEST	80	49718	45.32.199.48	192.168.2.17
Apr 1, 2025 11:31:16.000123024 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:16.000159979 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:16.000257015 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:16.000406027 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:16.000418901 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:16.210201025 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:16.210525990 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:16.210561037 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:26.271390915 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:26.271541119 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:26.271708012 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:27.390404940 CEST	49992	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:31:27.390433073 CEST	443	49992	142.250.80.100	192.168.2.17
Apr 1, 2025 11:31:51.506004095 CEST	443	49700	184.86.251.25	192.168.2.17
Apr 1, 2025 11:31:51.506067038 CEST	443	49700	184.86.251.25	192.168.2.17
Apr 1, 2025 11:31:51.506313086 CEST	49700	443	192.168.2.17	184.86.251.25
Apr 1, 2025 11:31:51.506320000 CEST	49700	443	192.168.2.17	184.86.251.25
Apr 1, 2025 11:32:16.059853077 CEST	49998	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:32:16.059914112 CEST	443	49998	142.250.80.100	192.168.2.17
Apr 1, 2025 11:32:16.059989929 CEST	49998	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:32:16.060184956 CEST	49998	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:32:16.060201883 CEST	443	49998	142.250.80.100	192.168.2.17
Apr 1, 2025 11:32:16.263047934 CEST	443	49998	142.250.80.100	192.168.2.17
Apr 1, 2025 11:32:16.263345957 CEST	49998	443	192.168.2.17	142.250.80.100
Apr 1, 2025 11:32:16.263381004 CEST	443	49998	142.250.80.100	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 1, 2025 11:30:11.343950033 CEST	53	52261	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:11.351830006 CEST	53	52059	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:11.854407072 CEST	53	63645	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:12.236808062 CEST	61674	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:12.236982107 CEST	60644	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:12.249170065 CEST	50375	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:12.249439001 CEST	57196	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:12.298757076 CEST	53	61063	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:12.348052979 CEST	53	57196	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:12.348066092 CEST	53	60644	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:12.417529106 CEST	53	50375	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:12.417541027 CEST	53	61674	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:15.943773031 CEST	53698	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:15.943950891 CEST	65383	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:16.041522980 CEST	53	53698	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:16.041543007 CEST	53	65383	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:29.214761019 CEST	53	62048	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:47.290004969 CEST	53	56461	162.159.36.2	192.168.2.17
Apr 1, 2025 11:30:47.566869020 CEST	62635	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:47.567050934 CEST	51932	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:47.659163952 CEST	53	62635	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:47.667829990 CEST	53	51932	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:48.039493084 CEST	53	54487	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:48.764368057 CEST	49911	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:48.764476061 CEST	59425	53	192.168.2.17	1.1.1.1
Apr 1, 2025 11:30:48.849000931 CEST	53	49911	1.1.1.1	192.168.2.17
Apr 1, 2025 11:30:48.849020004 CEST	53	59425	1.1.1.1	192.168.2.17
Apr 1, 2025 11:31:10.832309961 CEST	53	62398	1.1.1.1	192.168.2.17
Apr 1, 2025 11:31:11.221415997 CEST	53	49205	1.1.1.1	192.168.2.17
Apr 1, 2025 11:31:23.624968052 CEST	138	138	192.168.2.17	192.168.2.255
Apr 1, 2025 11:31:41.018912077 CEST	53	62011	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 1, 2025 11:30:12.236808062 CEST	192.168.2.17	1.1.1.1	0x27b2	Standard query (0)	static.twalls5280.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:12.236982107 CEST	192.168.2.17	1.1.1.1	0x8b9b	Standard query (0)	static.twalls5280.com	65	IN (0x0001)	false
Apr 1, 2025 11:30:12.249170065 CEST	192.168.2.17	1.1.1.1	0x67c8	Standard query (0)	static.twalls5280.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:12.249439001 CEST	192.168.2.17	1.1.1.1	0xb5bb	Standard query (0)	static.twalls5280.com	65	IN (0x0001)	false
Apr 1, 2025 11:30:15.943773031 CEST	192.168.2.17	1.1.1.1	0x12ea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:15.943950891 CEST	192.168.2.17	1.1.1.1	0x5e71	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 1, 2025 11:30:47.566869020 CEST	192.168.2.17	1.1.1.1	0x3d93	Standard query (0)	twalls5280.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:47.567050934 CEST	192.168.2.17	1.1.1.1	0xdec8	Standard query (0)	twalls5280.com	65	IN (0x0001)	false
Apr 1, 2025 11:30:48.764368057 CEST	192.168.2.17	1.1.1.1	0xe233	Standard query (0)	twalls5280.com	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:48.764476061 CEST	192.168.2.17	1.1.1.1	0x5b0a	Standard query (0)	twalls5280.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 1, 2025 11:30:12.417529106 CEST	1.1.1.1	192.168.2.17	0x67c8	No error (0)	static.twalls5280.com	45.32.199.48	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:12.417541027 CEST	1.1.1.1	192.168.2.17	0x27b2	No error (0)	static.twalls5280.com	45.32.199.48	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:16.041522980 CEST	1.1.1.1	192.168.2.17	0x12ea	No error (0)	www.google.com	142.250.80.100	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:16.041543007 CEST	1.1.1.1	192.168.2.17	0x5e71	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 1, 2025 11:30:47.659163952 CEST	1.1.1.1	192.168.2.17	0x3d93	No error (0)	twalls5280.com	66.96.147.103	A (IP address)	IN (0x0001)	false
Apr 1, 2025 11:30:48.849000931 CEST	1.1.1.1	192.168.2.17	0xe233	No error (0)	twalls5280.com	66.96.147.103	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

static.twalls5280.com

otelrules.svc.static.microsoft

www.google.com

twalls5280.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49718	45.32.199.48	80	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 1, 2025 11:30:57.564891100 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49719	45.32.199.48	80	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 1, 2025 11:30:57.565051079 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49717	45.32.199.48	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:12 UTC	671	OUT	GET / HTTP/1.1 Host: static.twalls5280.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 09:30:14 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 01 Apr 2025 09:30:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2025-04-01 09:30:14 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-04-01 09:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49724	45.32.199.48	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:14 UTC	605	OUT	GET /favicon.ico HTTP/1.1 Host: static.twalls5280.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.twalls5280.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 09:30:15 UTC	98	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 01 Apr 2025 09:30:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.17	49733	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:29 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:29 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:29 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 31 Mar 2025 13:35:46 GMT ETag: "0x8DD7058F19480A1" x-ms-request-id: ff822572-901e-007b-6ed3-a2ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093029Z-17cccd5449bvftlphC1EWRsrrs00000012ag0000000031dv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:29 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2025-04-01 09:30:29 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.17	49735	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f4bc1cbc-c01e-008e-5e89-a17381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-186b855ff67qsx49hC1NYCprms0000000bwg000000002rr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:30 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.17	49734	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: c912d40f-601e-0097-1c07-a2f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-17cccd5449bn9hh6hC1EWRzvfg0000001260000000008htz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:30 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.17	49738	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 425a1a07-801e-0047-52da-a27265000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-17cccd5449b6sxz8hC1EWRrtxw000000129g000000004cue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.17	49737	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: dde8ec96-b01e-0053-73d3-a2cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-17cccd5449bpx5xthC1EWRqmf4000000127000000000794u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.17	49736	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: afa93560-d01e-008e-45cc-a2387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-17cccd5449bpx5xthC1EWRqmf4000000129g0000000046yk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.17	49739	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:30 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:30 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 7422e491-e01e-0085-07cc-a2c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093030Z-17cccd5449bkr6n6hC1EWRx10800000000yg0000000079kt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.17	49741	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 61198763-c01e-007a-31bc-a1b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff67s7tdghC1NYC9z1g00000008v0000000000vq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.17	49742	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f2288c2c-a01e-00ab-2042-a19106000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff67t2mg6hC1NYCdxas00000007ag000000000123 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.17	49743	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d7c37fcd-501e-005b-2bd3-a2d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-17cccd5449bgvc9thC1EWR7dt000000012cg000000000xdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.17	49744	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 576eec1a-f01e-003c-1e8e-a18cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff6777hmxhC1NYCqz2000000009z0000000002xvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.17	49740	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d0f30d22-101e-008e-14b5-9fcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff67n5b8nhC1NYCnzbg000000083g000000002gz7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.17	49745	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a20747ad-b01e-0001-0fcc-a246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-17cccd5449bvftlphC1EWRsrrs000000126g000000007xpg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.17	49746	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 8f322779-501e-000a-1aa8-a00180000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff67tfv2bhC1NYCgrd400000008a0000000002vrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.17	49747	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 52c34390-b01e-0021-3bd9-9fcab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093031Z-186b855ff67qsx49hC1NYCprms0000000bxg000000002p5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.17	49749	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: afa0d67e-001e-00a2-27d3-a2d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bzd7mthC1EWRrdxw000000128g000000005azb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49748	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 2b5b9031-e01e-00aa-76d3-a2ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449b6sxz8hC1EWRrtxw00000012600000000087g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.17	49750	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:31 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 20803db2-101e-007a-4042-a1047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-186b855ff67dsnbmhC1NYCw3un0000000cvg00000000250v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.17	49751	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: ddd0cdf8-b01e-0053-0acc-a2cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bkk7bshC1EWR4rww00000012cg000000000w09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.17	49752	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bd0ed896-001e-000b-05cc-a215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bvftlphC1EWRsrrs000000129g000000003vw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.17	49753	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 31403623-e01e-0033-3d43-a14695000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-186b855ff67t295hhC1NYC2ad40000000d10000000002naz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.17	49754	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: baba423b-301e-0000-6dcc-a2eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bkr6n6hC1EWRx10800000000yg0000000079nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.17	49755	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: bd0ed9b2-001e-000b-15cc-a215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bzw64jhC1EWRz23400000012bg0000000022a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.17	49756	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6055655b-701e-003e-49cc-a279b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bq6f54hC1EWRb85w000000127g000000006d8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.17	49757	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a2074aae-b01e-0001-68cc-a246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bkk7bshC1EWR4rww0000001280000000005xkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.17	49758	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c4a42945-e01e-0099-3dcc-a2da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449b6vb9jhC1EWRfnfg00000012cg000000000nmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.17	49759	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 99aa0d64-f01e-0020-1bd3-a2956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449bj2jgkhC1EWRr8fn00000002ng000000007tu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.17	49760	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d863d4fe-d01e-0017-22d4-a2b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093032Z-17cccd5449b6sxz8hC1EWRrtxw00000012600000000087hq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.17	49761	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:32 UTC	199	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: dcf5935c-801e-0078-61cc-a2bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449bvj9xqhC1EWRh59s000000126g0000000074vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49762	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: bc3d41dc-001e-0049-22cc-a25bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449bfs6jfhC1EWR678800000012cg000000000scf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.17	49763	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 06802eb6-901e-00a0-1ccc-a26a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449bvj9xqhC1EWRh59s00000012d00000000004px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.17	49765	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fca5b386-701e-0097-43cc-a2b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449bkk7bshC1EWR4rww00000012bg000000001xvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.17	49766	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 891e6d97-c01e-0014-09c4-a2a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449bkk7bshC1EWR4rww00000012d000000000055r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.17	49767	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a39652cc-801e-002a-3306-a031dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-186b855ff67ghthrhC1NYCbh400000000abg000000001rn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.17	49764	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 9891ccd4-701e-0001-41cc-a2b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-17cccd5449blprb2hC1EWRvwmn0000001270000000006wft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.17	49768	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 54ba357a-701e-0032-80a7-a1a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093033Z-186b855ff67hcxwnhC1NYCvh9n00000009rg000000001vax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.17	49769	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: fceded11-d01e-008e-5df7-9f387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-186b855ff67tsqmwhC1NYCdu6w00000007sg000000001nb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.17	49770	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:33 UTC	199	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e577fce0-801e-0015-4bcc-a2f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bpx5xthC1EWRqmf400000012b0000000002s5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.17	49771	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: ec152d2d-401e-0047-2bcc-a28597000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449b6sxz8hC1EWRrtxw000000125g000000009byg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.17	49774	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e577fde6-801e-0015-3acc-a2f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bhkn97hC1EWRp7ew0000001270000000006ywg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.17	49775	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 42654fe7-201e-0051-7ecc-a27340000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449b4wvd9hC1EWRkczn00000012b0000000002de7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.17	49772	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7e84c20c-901e-007b-5f8c-a1ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-186b855ff67t2mg6hC1NYCdxas0000000740000000002yep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.17	49776	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 281d864b-001e-0079-30cc-a212e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bzd7mthC1EWRrdxw0000001280000000005x4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.17	49777	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d7722528-701e-0098-50cc-a2395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bh49mhhC1EWRu74000000012ag000000002z5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.17	49778	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 37127352-101e-007a-35d4-a2047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bqvwqkhC1EWR1rfs00000012600000000089w2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.17	49779	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:34 UTC	199	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 606d7314-701e-003e-53d3-a279b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093034Z-17cccd5449bkr6n6hC1EWRx10800000000y0000000006ssn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.17	49780	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1769a9de-701e-006f-72cc-a2afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-17cccd5449bh49mhhC1EWRu740000000125g0000000089uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.17	49782	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 19b7d42d-101e-005a-6b42-a1882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-186b855ff67s9jj8hC1NYC6vew0000000ayg000000002n8x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.17	49783	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 177acb44-701e-006f-60d3-a2afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-17cccd5449bqvwqkhC1EWR1rfs00000012bg0000000020b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.17	49784	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: baba4e55-301e-0000-37cc-a2eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-17cccd5449b89qrjhC1EWR229800000012c000000000196b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.17	49781	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: b2f2d7ee-901e-0029-4242-a1274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-186b855ff67ltxq6hC1NYCb09s00000008eg000000003ry5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.17	49785	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 60e4fa7f-601e-0001-2bcc-a2faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-17cccd5449bn9hh6hC1EWRzvfg0000001290000000005btp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.17	49786	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:35 UTC	199	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: c21774c2-601e-0032-17cc-a2eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093035Z-17cccd5449bk9jrqhC1EWRqvg400000004hg000000000aea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.17	49787	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 60556dac-701e-003e-5bcc-a279b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449bqvwqkhC1EWR1rfs00000012a00000000035s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.17	49773	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: e4cc0378-601e-0050-0fcc-a22c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449bh49mhhC1EWRu74000000012c0000000001fkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.17	49788	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: dde9008b-b01e-0053-1cd3-a2cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449b4tm5chC1EWRr5980000001280000000005v26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.17	49789	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7d1f63d9-b01e-005c-23ae-a14c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-186b855ff67tfv2bhC1NYCgrd40000000880000000003bv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.17	49790	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 27183a50-601e-003d-2ed4-a26f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449bk9jrqhC1EWRqvg400000004dg000000004b4n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.17	49791	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b0745d72-a01e-003d-6dcc-a298d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449b6sxz8hC1EWRrtxw000000127g0000000078v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.17	49792	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: c3365223-601e-006f-28cc-a2e43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449blr9xfhC1EWR6mgs000000128g000000005frd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.17	49793	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 220a806e-f01e-0003-198c-a14453000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-186b855ff67s7tdghC1NYC9z1g00000008r0000000002gxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.17	49794	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:36 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 9606efb8-401e-0015-24cc-a20e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449bxd7kxhC1EWRapns000000125g00000000777z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.17	49795	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:36 UTC	199	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 50041b02-601e-000d-4bcc-a22618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093036Z-17cccd5449bj2jgkhC1EWRr8fn00000002qg000000005p2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.17	49798	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 60e4fab2-601e-0001-5acc-a2faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-17cccd5449bvj9xqhC1EWRh59s00000012d00000000004uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.17	49796	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 0dd91a83-a01e-00ab-68d3-a29106000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-17cccd5449bn9hh6hC1EWRzvfg00000012bg0000000026s5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.17	49799	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: abff41da-c01e-0034-0443-a12af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-186b855ff67ltxq6hC1NYCb09s00000008eg000000003ryd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.17	49801	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 91aebda9-501e-005b-4743-a1d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-186b855ff67rnk8zhC1NYCuvt40000000cr0000000000ggr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.17	49802	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a21e37b4-b01e-0001-72d4-a246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-17cccd5449bn9hh6hC1EWRzvfg00000012800000000076wn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.17	49803	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0a8a9bdf-301e-000c-61cc-a2323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093037Z-17cccd5449b6vb9jhC1EWRfnfg00000012b0000000002bfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	49797	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:37 UTC	199	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 59760d96-001e-0066-45cc-a2561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449bzw64jhC1EWRz2340000001290000000004va3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.17	49804	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	199	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 43a2f90a-501e-0064-6acc-a21f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449bkr6n6hC1EWRx10800000000x0000000007prx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.17	49806	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	199	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e590357a-801e-0015-39d3-a2f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449blprb2hC1EWRvwmn00000012b0000000002712 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.17	49800	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	199	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 03b567ed-c01e-0082-57d3-a2af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449blr9xfhC1EWR6mgs00000012cg000000000q75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.17	49808	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	199	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 89359089-c01e-0014-80cc-a2a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449bn9hh6hC1EWRzvfg00000012d0000000000c8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.17	49809	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	199	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:38 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e5f948d0-001e-005a-30d3-a2c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093038Z-17cccd5449b6sxz8hC1EWRrtxw00000012cg000000000tf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:38 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.17	49810	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:38 UTC	200	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 11bba615-f01e-0099-0bd3-a29171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449bhkn97hC1EWRp7ew00000012cg000000000qrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.17	49811	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	200	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 2e183b73-c01e-0066-57cc-a2a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449bfs6jfhC1EWR678800000012c000000000195e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.17	49812	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 743a16b9-e01e-0085-3ad3-a2c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449b4wvd9hC1EWRkczn0000001270000000006dr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.17	49805	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c4a43111-e01e-0099-1dcc-a2da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449bk9jrqhC1EWRqvg400000004ag000000007zfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.17	49807	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5f62b0e2-001e-0028-0a8c-a1c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-186b855ff6799fd4hC1NYC1den0000000axg0000000003rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.17	49814	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	200	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 02fac705-f01e-001f-0fd9-9f5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-186b855ff67s7tdghC1NYC9z1g00000008v0000000000vxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.17	49813	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:39 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: b2847411-b01e-0098-16ec-9fcead000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-186b855ff67bl2qrhC1NYCf0b8000000091g0000000037pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:39 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.17	49815	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 03b56ef1-c01e-0082-45d3-a2af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449bgvc9thC1EWR7dt00000001270000000007s3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.17	49816	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:39 UTC	199	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 90b6701c-401e-0035-0fd8-a282d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093039Z-17cccd5449bn9hh6hC1EWRzvfg0000001290000000005c1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.17	49817	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 32665111-801e-00a3-36d8-a27cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449bpx5xthC1EWRqmf400000012ag000000002ytm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.17	49819	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 3d693da9-201e-006e-25c4-a2bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449bh49mhhC1EWRu74000000012a0000000003w5q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.17	49820	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 33fe34f7-901e-008f-12d8-a267a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449b6sxz8hC1EWRrtxw00000012c00000000017xt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.17	49821	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 145540d4-c01e-008e-2cb0-a07381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-186b855ff6799fd4hC1NYC1den0000000aw0000000000hn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.17	49818	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 36b8376d-301e-003f-32cc-a2266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449bj2jgkhC1EWRr8fn00000002r0000000005az4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.17	49822	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: ddb4a007-b01e-0053-70c4-a2cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449bqnwr7hC1EWRa660000000127g0000000070zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.17	49823	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:40 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 65479a4b-201e-003c-2fa8-a030f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-186b855ff67ghthrhC1NYCbh400000000a9g000000002b39 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.17	49824	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 00851b29-501e-0016-1ad3-a2181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-17cccd5449bzw64jhC1EWRz23400000012800000000061xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.17	49825	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:40 UTC	199	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:40 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 8b69a43c-301e-0052-0543-a165d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093040Z-186b855ff67ghbbkhC1NYCrarg0000000820000000000vzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.17	49826	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 574f639f-a01e-006f-588d-a113cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-186b855ff67n5b8nhC1NYCnzbg00000008800000000004qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.17	49827	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 4b1af98a-d01e-0065-37b1-a1b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-186b855ff67tfv2bhC1NYCgrd400000008bg000000001r3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.17	49828	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 390029da-a01e-0002-52cc-a25074000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449bq6f54hC1EWRb85w00000012c000000000180f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.17	49829	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 51e73a2b-201e-003c-2cd4-a230f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449bhkn97hC1EWRp7ew000000126g000000007fg5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.17	49830	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 039e7d22-c01e-0082-60cc-a2af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449blprb2hC1EWRvwmn000000128g000000004mfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.17	49831	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 7e7979c5-801e-0083-05cc-a2f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449blr9xfhC1EWR6mgs000000127g0000000063ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.17	49832	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0dc222b1-a01e-00ab-21cc-a29106000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449b6vb9jhC1EWRfnfg000000128g000000004yy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.17	49833	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 2c262e11-301e-0020-61d3-a26299000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449b89qrjhC1EWR2298000000128g000000005dce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.17	49834	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 2e32a23c-c01e-0066-13d4-a2a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449b4tm5chC1EWRr59800000012bg000000001y4e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.17	49835	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:41 UTC	199	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:41 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:41 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a0ee13a1-c01e-002b-34d3-a26e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093041Z-17cccd5449bkk7bshC1EWR4rww00000012c0000000001fxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:41 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.17	49836	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d02b6f3a-f01e-003f-4ea8-a0d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-186b855ff67hcxwnhC1NYCvh9n00000009qg000000002unw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.17	49837	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: f35609a9-801e-00ac-25cc-a2fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449b6vb9jhC1EWRfnfg000000126g000000007sbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.17	49838	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: cfe0b609-701e-001e-4cd4-a2f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449b6sxz8hC1EWRrtxw00000012c00000000017zk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	49840	142.250.80.100	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	487	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLf3ygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 09:30:42 UTC	1303	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-r7L7QreLxCLIwv0QNge7OQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-01 09:30:42 UTC	1303	IN	Data Raw: 64 36 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6d 72 20 63 6f 6f 70 65 72 20 6d 6f 72 74 67 61 67 65 20 72 6f 63 6b 65 74 20 6d 6f 72 74 67 61 67 65 22 2c 22 73 70 69 64 65 72 20 6d 61 6e 20 62 72 61 6e 64 20 6e 65 77 20 64 61 79 20 6d 61 72 76 65 6c 22 2c 22 63 6f 6c 6f 72 61 64 6f 20 72 6f 63 6b 69 65 73 20 70 68 69 6c 61 64 65 6c 70 68 69 61 20 70 68 69 6c 6c 69 65 73 22 2c 22 73 70 61 63 65 78 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 64 61 69 6c 79 20 68 6f 72 6f 73 63 6f 70 65 20 74 6f 64 61 79 22 2c 22 63 68 69 70 6f 74 6c 65 20 63 6c 6f 73 69 6e 67 20 72 65 73 74 61 75 72 61 6e 74 73 22 2c 22 73 74 75 64 65 6e 74 20 6c 6f 61 6e 73 20 6c 6f 61 6e 20 66 6f 72 Data Ascii: d60)]}'["",["mr cooper mortgage rocket mortgage","spider man brand new day marvel","colorado rockies philadelphia phillies","spacex rocket launch","weather storms tornadoes","daily horoscope today","chipotle closing restaurants","student loans loan for
2025-04-01 09:30:42 UTC	1303	IN	Data Raw: 6e 70 75 51 7a 4e 5a 54 6a 4e 5a 61 6d 59 78 4d 7a 6c 57 4d 32 70 71 4e 46 6c 6a 56 56 6f 35 65 46 70 59 57 6d 35 53 55 7a 42 78 4d 44 68 79 4c 31 4d 31 61 32 30 72 62 6e 52 6a 5a 54 56 50 53 30 5a 54 4e 56 42 75 63 7a 4e 42 4f 47 56 58 57 6d 39 68 54 32 4a 4e 62 58 56 30 55 6d 49 32 59 32 4e 70 4e 6e 6c 53 57 58 46 45 63 45 39 74 4d 6a 52 59 57 54 6c 7a 56 6d 31 6a 61 30 74 42 57 6c 4e 47 51 7a 6c 55 52 45 73 35 63 46 6c 77 62 31 6c 75 57 58 70 4f 53 44 6c 4d 65 47 64 4e 65 45 35 75 4d 30 6c 47 61 56 52 5a 5a 45 77 33 52 7a 49 72 62 58 4a 78 51 57 46 50 63 45 78 56 62 46 64 50 56 31 70 4f 52 45 4e 4d 56 30 56 73 53 55 4a 56 52 55 74 45 59 32 68 30 64 46 42 72 5a 48 64 6b 63 30 30 76 4f 57 78 78 4e 6c 64 58 63 6d 70 78 4d 45 46 71 61 32 63 78 59 33 68 59 Data Ascii: npuQzNZTjNZamYxMzlWM2pqNFljVVo5eFpYWm5SUzBxMDhyL1M1a20rbnRjZTVPS0ZTNVBuczNBOGVXWm9hT2JNbXV0UmI2Y2NpNnlSWXFEcE9tMjRYWTlzVm1ja0tBWlNGQzlUREs5cFlwb1luWXpOSDlMeGdNeE5uM0lGaVRZZEw3RzIrbXJxQWFPcExVbFdPV1pORENMV0VsSUJVRUtEY2h0dFBrZHdkc00vOWxxNldXcmpxMEFqa2cxY3hY
2025-04-01 09:30:42 UTC	825	IN	Data Raw: 52 6c 42 6c 62 54 56 76 63 55 6f 78 4e 55 52 45 62 6e 6c 35 52 54 64 69 54 6c 6c 45 64 33 49 77 53 6a 4e 49 64 55 31 4e 4c 30 4d 7a 52 6a 41 76 52 44 4a 57 52 31 4e 75 62 31 6c 68 56 7a 5a 4f 52 6b 68 44 4e 46 6c 73 51 6e 70 44 65 57 74 79 4c 30 46 43 52 7a 55 79 53 46 63 30 55 48 42 71 63 48 46 4f 51 57 31 56 52 6b 78 55 56 6b 68 32 64 45 45 33 4e 44 64 78 4d 58 6c 53 4e 6d 6f 34 62 6e 70 48 56 30 34 78 57 58 6c 54 54 44 46 61 61 6a 46 47 4b 7a 4e 59 4c 32 4a 43 51 6c 5a 44 63 55 5a 56 59 6b 46 58 52 30 6c 4b 55 48 68 6b 62 54 6c 4a 62 6e 70 47 54 30 4a 54 65 56 5a 56 53 55 68 4e 4d 46 68 61 61 48 56 43 53 6c 6c 75 4e 33 5a 46 65 45 4a 30 59 54 64 6b 4f 58 4e 51 4d 30 4a 59 52 6d 78 61 62 58 6c 61 55 45 4e 7a 56 58 4a 4d 54 30 70 55 55 45 70 56 61 30 59 Data Ascii: RlBlbTVvcUoxNUREbnl5RTdiTllEd3IwSjNIdU1NL0MzRjAvRDJWR1Nub1lhVzZORkhDNFlsQnpDeWtyL0FCRzUySFc0UHBqcHFOQW1VRkxUVkh2dEE3NDdxMXlSNmo4bnpHV04xWXlTTDFaajFGKzNYL2JCQlZDcUZVYkFXR0lKUHhkbTlJbnpGT0JTeVZVSUhNMFhaaHVCSlluN3ZFeEJ0YTdkOXNQM0JYRmxabXlaUENzVXJMT0pUUEpVa0Y
2025-04-01 09:30:42 UTC	93	IN	Data Raw: 35 37 0d 0a 30 52 6e 70 6c 4c 31 63 31 4f 48 4e 5a 63 33 68 79 57 6d 38 34 64 47 78 59 56 56 52 35 56 56 70 5a 4d 55 4e 6e 52 55 5a 32 59 6d 4d 7a 54 6e 56 32 61 30 39 33 64 7a 46 4d 62 46 5a 6b 62 48 56 57 57 6b 35 58 64 45 64 71 63 57 46 44 53 55 6c 78 64 6c 6b 7a 54 56 0d 0a Data Ascii: 570RnplL1c1OHNZc3hyWm84dGxYVVR5VVpZMUNnRUZ2YmMzTnV2a093dzFMbFZkbHVWWk5XdEdqcWFDSUlxdlkzTV
2025-04-01 09:30:42 UTC	997	IN	Data Raw: 36 38 63 0d 0a 6c 50 62 47 67 79 4e 6c 63 33 4e 32 74 49 64 48 4e 4d 51 6c 6c 52 55 6e 6c 53 4e 6a 6b 35 4e 48 4e 6a 57 54 4a 72 5a 32 49 34 64 31 42 6f 59 6a 5a 77 63 32 39 58 54 33 4a 77 53 32 31 50 51 33 46 79 55 7a 52 42 59 30 56 47 51 6a 4e 47 61 46 6c 6d 64 6e 59 72 56 47 64 6b 64 31 42 74 4f 56 52 56 5a 6b 55 76 53 32 77 31 62 58 42 49 56 31 64 44 65 57 35 33 61 56 42 73 54 54 46 6f 4e 32 78 42 5a 6a 56 53 5a 30 35 74 55 45 56 56 62 45 4a 56 51 31 4e 73 63 48 68 42 5a 56 64 35 53 7a 68 78 54 33 4a 45 56 54 45 72 64 57 39 68 64 48 4a 45 57 57 74 6c 52 56 68 51 59 6b 68 55 4e 46 4e 55 65 6c 4e 6d 52 55 78 4d 56 7a 42 4d 54 48 5a 4c 57 6b 70 4f 55 44 49 7a 61 57 5a 6a 5a 56 68 5a 5a 6d 30 79 52 32 31 6e 5a 7a 56 58 54 30 64 30 53 55 6f 30 53 32 35 6a Data Ascii: 68clPbGgyNlc3N2tIdHNMQllRUnlSNjk5NHNjWTJrZ2I4d1BoYjZwc29XT3JwS21PQ3FyUzRBY0VGQjNGaFlmdnYrVGdkd1BtOVRVZkUvS2w1bXBIV1dDeW53aVBsTTFoN2xBZjVSZ05tUEVVbEJVQ1NscHhBZVd5SzhxT3JEVTErdW9hdHJEWWtlRVhQYkhUNFNUelNmRUxMVzBMTHZLWkpOUDIzaWZjZVhZZm0yR21nZzVXT0d0SUo0S25j
2025-04-01 09:30:42 UTC	686	IN	Data Raw: 74 32 4f 46 46 6c 64 47 78 52 63 6d 39 53 53 58 64 48 64 56 4e 54 64 57 38 79 64 57 56 78 5a 33 4e 6d 54 57 4a 44 65 44 68 50 54 47 31 71 51 31 55 78 59 6a 68 6f 61 32 4a 51 62 47 59 76 4d 6c 45 39 50 54 6f 66 63 33 42 70 5a 47 56 79 49 47 31 68 62 69 42 69 63 6d 46 75 5a 43 42 75 5a 58 63 67 5a 47 46 35 49 47 31 68 63 6e 5a 6c 62 45 6f 48 49 7a 51 79 4e 44 49 30 4d 6c 4a 50 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 45 78 51 4d 56 52 6a 64 33 70 7a 63 33 70 78 4d 47 38 79 57 56 42 54 55 30 78 35 4e 30 6c 55 52 57 74 30 56 58 4e 6f 54 6e 70 47 54 6b 6c 4c 61 33 4a 4e 55 7a 46 49 53 56 4e 35 4d 56 68 54 52 57 31 7a 51 6b 6c 76 56 57 78 68 57 47 31 42 51 55 4a 4d 4f 47 63 35 52 6e 41 4a 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 Data Ascii: t2OFFldGxRcm9SSXdHdVNTdW8ydWVxZ3NmTWJDeDhPTG1qQ1UxYjhoa2JQbGYvMlE9PTofc3BpZGVyIG1hbiBicmFuZCBuZXcgZGF5IG1hcnZlbEoHIzQyNDI0MlJPZ3Nfc3NwPWVKemo0dExQMVRjd3pzc3pxMG8yWVBTU0x5N0lURWt0VXNoTnpGTklLa3JNUzFISVN5MVhTRW1zQklvVWxhWG1BQUJMOGc5RnAJ","zl":10002},{"zl":1
2025-04-01 09:30:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.17	49839	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e57814f7-801e-0015-55cc-a2f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449b4tm5chC1EWRr598000000125g000000007nqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.17	49841	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 74230690-e01e-0085-6dcc-a2c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449bfs6jfhC1EWR678800000012d00000000005by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.17	49842	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6e257e67-201e-000c-11cc-a279c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449bk9jrqhC1EWRqvg400000004d0000000005cyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.17	49843	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 11c8cdbf-201e-000c-1143-a179c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-186b855ff67t2mg6hC1NYCdxas000000079g000000000nn2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.17	49844	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a9d9e69b-001e-0046-7ecc-a2da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449bhkn97hC1EWRp7ew000000126g000000007fhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.17	49845	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 60557b4f-701e-003e-06cc-a279b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449b4tm5chC1EWRr598000000126g000000006ee8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.17	49846	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:42 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:42 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 895c4c61-c01e-0014-75d8-a2a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093042Z-17cccd5449bzd7mthC1EWRrdxw000000125g000000008598 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:42 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.17	49847	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:42 UTC	199	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b83bd817-901e-00a0-56d9-9f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-186b855ff67n5b8nhC1NYCnzbg0000000820000000002rc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.17	49848	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 3d8224df-201e-006e-46cc-a2bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-17cccd5449bn9hh6hC1EWRzvfg000000129g000000004vh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.17	49849	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: d411f786-401e-008c-63cc-a286c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-17cccd5449bkk7bshC1EWR4rww000000128g0000000053u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.17	49850	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 197f5846-101e-005a-7c26-a1882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-186b855ff67s7tdghC1NYC9z1g00000008qg0000000037q8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.17	49851	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 21ab7c06-501e-0064-0ae0-9f1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-186b855ff67sljfchC1NYC717n00000009fg000000000cdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.17	49852	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ae3051b4-101e-005a-32d3-a2882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-17cccd5449bq6f54hC1EWRb85w00000012a0000000004201 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.17	49854	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: fdbef9da-401e-005b-278e-a19c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-186b855ff67tfv2bhC1NYCgrd400000008900000000038eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.17	49853	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ad9f6363-701e-0098-71d3-a2395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-17cccd5449b4tm5chC1EWRr5980000001260000000007nz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.17	49855	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 8e8b70af-001e-0079-2043-a112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-186b855ff67dsnbmhC1NYCw3un0000000cx0000000001n4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.17	49856	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:43 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: c656b31a-a01e-0032-66cc-a21949000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093043Z-17cccd5449bvj9xqhC1EWRh59s00000012ag000000002wsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.17	49857	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: ae339247-201e-0071-1143-a1ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-186b855ff67snl4khC1NYCwt9000000007f0000000003e8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.17	49858	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: e51c44f1-c01e-0049-04cc-a2ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449b89qrjhC1EWR229800000012bg000000002dez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.17	49859	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:43 UTC	199	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: d1dce6ea-001e-00ad-6acc-a2554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449bzd7mthC1EWRrdxw00000012ag000000002s29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.17	49860	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: f3f6f986-a01e-0084-04cc-a29ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449bn9hh6hC1EWRzvfg00000012d0000000000ckf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.17	49861	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 24e5774e-a01e-0032-0f17-a21949000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449bpx5xthC1EWRqmf4000000128g000000005f00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.17	49862	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2e184b3f-c01e-0066-5fcc-a2a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449b89qrjhC1EWR229800000012bg000000002dfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.17	49863	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 38fc3ab6-301e-005d-36cc-a2e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449bn9hh6hC1EWRzvfg00000012bg00000000275n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.17	49864	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 702e10d4-701e-0053-3fae-a13a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-186b855ff67bl2qrhC1NYCf0b8000000096g000000001bt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.17	49865	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: ae3058e1-101e-005a-1ed3-a2882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449blr9xfhC1EWR6mgs00000012d00000000003u5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.17	49866	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: bd26bdd6-001e-000b-54d3-a215a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449b89qrjhC1EWR2298000000129g0000000043t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.17	49867	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:44 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:44 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 07414178-901e-005b-6ecc-a22005000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093044Z-17cccd5449bq6f54hC1EWRb85w000000125g000000008hs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:44 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.17	49868	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 7a39e61a-301e-003f-02a8-a0266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff67n5b8nhC1NYCnzbg000000085g0000000012m4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.17	49869	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:44 UTC	199	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 634c05cd-801e-0015-198c-a1f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff67s9jj8hC1NYC6vew0000000b00000000001xgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.17	49870	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: baba710a-301e-0000-35cc-a2eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-17cccd5449bxd7kxhC1EWRapns0000001270000000006bq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.17	49871	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 21d8d1a7-801e-002a-378c-a131dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff6799zdhhC1NYCsxws00000008gg000000001vvp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.17	49872	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 08fbc0e5-a01e-006f-0443-a113cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff6799fd4hC1NYC1den0000000at000000000292s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.17	49873	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: d7c39f4a-501e-005b-7fd3-a2d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-17cccd5449b6vb9jhC1EWRfnfg00000012a0000000003r0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.17	49874	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: f7345cc1-801e-0035-088d-a1752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff6777hmxhC1NYCqz200000000a4g00000000050m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.17	49875	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: d7c52b8e-201e-0096-30cc-a2ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-17cccd5449b89qrjhC1EWR22980000001280000000005tnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.17	49876	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 314049bf-e01e-0033-5543-a14695000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff672mgwjhC1NYC9b0c0000000d9g000000001y2u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.17	49877	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 34988f10-301e-001f-16cc-a2aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-17cccd5449bgvc9thC1EWR7dt000000012c0000000001hfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.17	49879	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b708729d-801e-0015-67ad-a0f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-186b855ff67ghbbkhC1NYCrarg00000007yg000000001y5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.17	49878	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:45 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:45 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: cd2502d9-201e-0000-47cc-a2a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093045Z-17cccd5449bvj9xqhC1EWRh59s000000127g000000006a3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:45 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.17	49880	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-01 09:30:45 UTC	199	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-01 09:30:46 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 09:30:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: f35617c0-801e-00ac-37cc-a2fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20250401T093046Z-17cccd5449bxd7kxhC1EWRapns00000012a00000000034v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-01 09:30:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 7092, Parent PID: 2764

Function Logs

General

Target ID:	0
Start time:	05:30:09
Start date:	01/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6240, Parent PID: 7092

Function Logs

General

Target ID:	1
Start time:	05:30:10
Start date:	01/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2100,i,6597147279751173296,7027877328382044137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:3
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4304, Parent PID: 2764

Function Logs

General

Target ID:	2
Start time:	05:30:11
Start date:	01/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://static.twalls5280.com"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://static.twalls5280.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 7092, Parent PID: 2764

General

File Activities

File Opened

File Created

File Deleted

File Moved

Other File Operations

Windows Analysis Report
http://static.twalls5280.com