Edit tour

Windows Analysis Report
http://franoapas.co.in

Overview

General Information

Sample URL:	http://franoapas.co.in
Analysis ID:	1654804
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,665249329600805583,15721968313520424199,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://franoapas.co.in" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://franoapas.co.in

Avira URL Cloud: detection malicious, Label: malware

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49728 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft

Source: global traffic	DNS traffic detected: DNS query: franoapas.co.in
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49728 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir380_1850095348

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir380_1850095348

Jump to behavior

Source: classification engine

Classification label: mal48.win@27/0@24/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,665249329600805583,15721968313520424199,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://franoapas.co.in"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,665249329600805583,15721968313520424199,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://franoapas.co.in	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.64.78	true	false	high
www.google.com	142.251.40.196	true	false	high
franoapas.co.in	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false	high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700200v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700500v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule224902v2s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120651v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120402v21s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120642v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702950v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120629v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702651v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120623v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule702201v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120658v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule703951v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule120676v0s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700651v1s19.xml	false	high
https://otelrules.svc.static.microsoft/rules/rule700201v1s19.xml	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.251.40.196	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.18

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1654804
Start date and time:	2025-04-02 16:41:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://franoapas.co.in
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@27/0@24/3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.110, 142.251.40.195, 172.253.115.84, 142.251.40.142, 142.251.40.238, 172.217.165.142, 142.251.41.14, 142.251.35.174, 142.251.40.206, 142.250.65.238, 142.251.32.110, 142.250.65.227, 142.250.80.14, 142.250.80.78, 142.251.40.163, 142.250.72.110, 4.245.163.56, 184.31.69.3
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, otelrules.svc.static.microsoft, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://franoapas.co.in

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 2166
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 16:42:17.355726004 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:17.371522903 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:17.371618032 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:17.658377886 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:17.668731928 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:17.668783903 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:17.668893099 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:17.669114113 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:17.669131041 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:17.674398899 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:17.674451113 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:17.874777079 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:17.874886990 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:17.876096010 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:17.876106977 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:17.876408100 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:17.927385092 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:18.263374090 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:18.279386997 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:18.279485941 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:18.788572073 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:18.932643890 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:19.092412949 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:19.236366034 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:19.475399017 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:19.491451979 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:19.493972063 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:19.699383020 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:19.843378067 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:20.912372112 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:21.049345016 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:21.890320063 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:21.906369925 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:21.906631947 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:23.322350025 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:23.463435888 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:24.765814066 CEST	49677	443	192.168.2.17	184.86.251.25
Apr 2, 2025 16:42:24.765870094 CEST	443	49677	184.86.251.25	192.168.2.17
Apr 2, 2025 16:42:24.765894890 CEST	49677	443	192.168.2.17	184.86.251.25
Apr 2, 2025 16:42:24.765901089 CEST	443	49677	184.86.251.25	192.168.2.17
Apr 2, 2025 16:42:26.698358059 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:26.714381933 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:26.714411974 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:27.889244080 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:27.889305115 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:27.889426947 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:28.133362055 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:28.280339003 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:29.075356960 CEST	49721	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:42:29.075397968 CEST	443	49721	142.251.40.196	192.168.2.17
Apr 2, 2025 16:42:31.854204893 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:31.854291916 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:31.854383945 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:31.854676962 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:31.854702950 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.169205904 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.169338942 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.171130896 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.171160936 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.171606064 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.175399065 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.220274925 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.464198112 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.464226961 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.464243889 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.464399099 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.464442015 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.464462042 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.464503050 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.496135950 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.496193886 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.496398926 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.496432066 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.496484995 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.569602966 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.569629908 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.569832087 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.569865942 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.569916964 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.586540937 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.586564064 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.586723089 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.586759090 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.586824894 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.616266012 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.616292000 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.616450071 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.616488934 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.616533041 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.672110081 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.672189951 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.672349930 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.672425985 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.672466993 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.672501087 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.698132992 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.698158026 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.698296070 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.698324919 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.698374987 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.726965904 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.726989031 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.727109909 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.727144003 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.727210045 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.767920971 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.767971992 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.768089056 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.768125057 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.768177032 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.796452999 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.796482086 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.796600103 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.796669006 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.796745062 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.827502012 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.827519894 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.827662945 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.827694893 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.827753067 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.965909004 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.965941906 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.966155052 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.966192007 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.966258049 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.972381115 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.972407103 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.972449064 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.972517967 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.972588062 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.972656012 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.972984076 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.973007917 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:32.973022938 CEST	49728	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:32.973031998 CEST	443	49728	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028213978 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028279066 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028353930 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028398037 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028412104 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028476954 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028527975 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028563976 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028620958 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028695107 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028703928 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028779984 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028781891 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028789997 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028840065 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028851032 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028912067 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028918028 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.028958082 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.028961897 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.029911041 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.029931068 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.030003071 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.030112028 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.030117035 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.334315062 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.334500074 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.335720062 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.335720062 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.335720062 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.335720062 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.335746050 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.335760117 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.335769892 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.335776091 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.336934090 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.337354898 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.337392092 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.337752104 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.337768078 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.337779045 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.338088989 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.338112116 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.338562012 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.338584900 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.356446028 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.357182980 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.357209921 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.357729912 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.357738018 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.530132055 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.530203104 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.530261993 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.530580044 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.530600071 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.530613899 CEST	49732	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.530618906 CEST	443	49732	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.534176111 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.534213066 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.534329891 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.534589052 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.534598112 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535372019 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535401106 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535454988 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.535464048 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535516977 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.535583973 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535640955 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535696983 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.535748005 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.535752058 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.535765886 CEST	49731	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.535768986 CEST	443	49731	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536401987 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536432981 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536501884 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.536520958 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536561012 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536597013 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.536637068 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.536647081 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.536659002 CEST	49730	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.536663055 CEST	443	49730	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.537945986 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.538151026 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.538368940 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.538389921 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.538402081 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.538417101 CEST	49729	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.538422108 CEST	443	49729	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.538779020 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.538824081 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.538944960 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.539001942 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.539051056 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.539087057 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.539105892 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.539120913 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.539203882 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.539216042 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.541162014 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.541188955 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.541276932 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.541352034 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.541362047 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.556282997 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.556348085 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.556416035 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.556607008 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.556619883 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.556636095 CEST	49733	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.556642056 CEST	443	49733	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.559526920 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.559566021 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.559653044 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.559778929 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.559788942 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.838984966 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.839811087 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.839840889 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.840506077 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.840512991 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.844213009 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.844736099 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.844755888 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.845158100 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.845161915 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.848774910 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.849179983 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.849219084 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.849704027 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.849709988 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.851577044 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.851943016 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.851958036 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.852297068 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.852300882 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.871880054 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.872241974 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.872267008 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:33.872730970 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:33.872735023 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.033725977 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.033812046 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.033886909 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.034245014 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.034257889 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.034269094 CEST	49734	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.034274101 CEST	443	49734	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.037724018 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.037858009 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.037925959 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038124084 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038137913 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.038156033 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038168907 CEST	49736	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038186073 CEST	443	49736	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.038197041 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.038264036 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038428068 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.038446903 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.040940046 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.040972948 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.041042089 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.041157007 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.041167974 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.041697025 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042018890 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042061090 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042069912 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042108059 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042120934 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042150974 CEST	49735	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042157888 CEST	443	49735	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042418003 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042473078 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042505980 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042505980 CEST	49737	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.042521000 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.042530060 CEST	443	49737	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.045007944 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045031071 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.045097113 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045229912 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045248985 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.045284986 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045295000 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.045334101 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045449018 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.045459032 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.064856052 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.064925909 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.064996004 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.065161943 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.065176010 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.065191031 CEST	49738	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.065196991 CEST	443	49738	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.067966938 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.067982912 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.068049908 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.068224907 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.068234921 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.334156990 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.334909916 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.334943056 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.335480928 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.335486889 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.336740017 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.337076902 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.337282896 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.337313890 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.337398052 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.337424994 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.337728024 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.337734938 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.337810993 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.337819099 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.366664886 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.367260933 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.367280006 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.367748976 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.367753983 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.368814945 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.369308949 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.369329929 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.369755983 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.369761944 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532181025 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532191038 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532272100 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532284975 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532370090 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532381058 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532392979 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532468081 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532529116 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532597065 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532598019 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532615900 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532615900 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532629013 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532629013 CEST	49741	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532634020 CEST	49742	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532634020 CEST	49740	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.532640934 CEST	443	49742	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532641888 CEST	443	49740	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532649040 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.532655001 CEST	443	49741	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.536844015 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.536902905 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.536947012 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.536947966 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.536986113 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.536987066 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.536990881 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537055969 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537159920 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537163019 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537180901 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.537195921 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537206888 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.537306070 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.537319899 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.569999933 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.570175886 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.570367098 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.570523024 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.570542097 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.570557117 CEST	49743	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.570563078 CEST	443	49743	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.574083090 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.574126959 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.574225903 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.574414015 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.574429035 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.578125954 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.579438925 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.579520941 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.579581976 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.579600096 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.579615116 CEST	49739	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.579619884 CEST	443	49739	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.582345963 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.582357883 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.582449913 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.582603931 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.582617998 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.835577965 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.835867882 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.835994959 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.836397886 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.836420059 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.836509943 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.836569071 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.836579084 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.836599112 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.837057114 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.837061882 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.837110043 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.837124109 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.837157965 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.837166071 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.872078896 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.872766018 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.872805119 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.873440981 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.873447895 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.882231951 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.882833004 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.882849932 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:34.883316994 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:34.883321047 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.033808947 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.033982992 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.034070015 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.034341097 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.034341097 CEST	49744	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.034388065 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.034419060 CEST	443	49744	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.035881996 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.036370039 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.036423922 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.036464930 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.036484003 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.036497116 CEST	49746	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.036501884 CEST	443	49746	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038074017 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038150072 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038234949 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038362026 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038376093 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038388014 CEST	49745	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038393021 CEST	443	49745	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038530111 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038559914 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.038631916 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038809061 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.038825989 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.039294004 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.039308071 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.039388895 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.039577007 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.039589882 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.040575981 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.040621996 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.040699005 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.040836096 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.040868998 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.073302031 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.073426962 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.073491096 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.073579073 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.073596954 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.073610067 CEST	49747	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.073615074 CEST	443	49747	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.076280117 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.076319933 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.076395988 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.076561928 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.076575041 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.080523968 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.080739021 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.080800056 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.080833912 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.080841064 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.080852032 CEST	49748	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.080856085 CEST	443	49748	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.083069086 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.083096027 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.083165884 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.083301067 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.083313942 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.338150024 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.338839054 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.338938951 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.339092016 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.339410067 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.339426041 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.339490891 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.339519024 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.339929104 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.339939117 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.354485035 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.355048895 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.355067968 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.355565071 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.355570078 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.381109953 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.381699085 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.381733894 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.382110119 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.382116079 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.535937071 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.536036968 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.536196947 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.536451101 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.536451101 CEST	49751	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.536489010 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.536518097 CEST	443	49751	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.537260056 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.537329912 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.537384033 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.537451029 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.537468910 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.537484884 CEST	49749	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.537491083 CEST	443	49749	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.539931059 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.539969921 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.540076971 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.540106058 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.540152073 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.540210009 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.540232897 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.540246964 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.540395021 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.540410042 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.556546926 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.556622028 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.556684971 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.556816101 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.556835890 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.556848049 CEST	49750	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.556854010 CEST	443	49750	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.559401989 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.559417963 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.559643984 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.559643984 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.559672117 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.578181028 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.578252077 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.578363895 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.578856945 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.578872919 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.579085112 CEST	49752	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.579091072 CEST	443	49752	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.580915928 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.580945969 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.581013918 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.581125021 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.581137896 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.840532064 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.841140032 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.841322899 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.841350079 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.841486931 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.841500044 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.842112064 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.842114925 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.842117071 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.842124939 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.862164021 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.862737894 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.862761974 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.863244057 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.863250971 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.887160063 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.887897015 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.887912035 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:35.888525963 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:35.888530970 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.038759947 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.038851976 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.038944006 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.039236069 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.039262056 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.039274931 CEST	49754	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.039282084 CEST	443	49754	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.043329954 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.043375969 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.043462992 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.043644905 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.043663025 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.044516087 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.044946909 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.045057058 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.045089960 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.045104980 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.045192003 CEST	49755	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.045197964 CEST	443	49755	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.047883987 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.047919989 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.048018932 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.048146009 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.048158884 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.062647104 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.062879086 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.062944889 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.062994957 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.063008070 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.063018084 CEST	49756	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.063023090 CEST	443	49756	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.065979004 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.066011906 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.066109896 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.066292048 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.066306114 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.089757919 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.089847088 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.089909077 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.090135098 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.090135098 CEST	49757	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.090154886 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.090168953 CEST	443	49757	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.093556881 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.093591928 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.093667984 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.093801975 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.093816996 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.304398060 CEST	49682	443	192.168.2.17	51.132.193.104
Apr 2, 2025 16:42:36.321125031 CEST	49671	443	192.168.2.17	52.109.28.46
Apr 2, 2025 16:42:36.321125031 CEST	49683	80	192.168.2.17	2.17.190.73
Apr 2, 2025 16:42:36.344063997 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.345086098 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.345105886 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.345839024 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.345845938 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.348145008 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.348843098 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.348877907 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.349339008 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.349350929 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.370738983 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.371572018 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.371582985 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.372275114 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.372281075 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.400146961 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.400883913 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.400924921 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.401652098 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.401675940 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.403105974 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.403568029 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.403589964 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.404109001 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.404114008 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.547712088 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.547909021 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.547972918 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.548201084 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.548221111 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.548232079 CEST	49758	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.548238039 CEST	443	49758	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.551800966 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.551842928 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.551934004 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.552160025 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.552170992 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.562511921 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.562717915 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.562796116 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.563013077 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.563035011 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.563045979 CEST	49759	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.563054085 CEST	443	49759	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.566422939 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.566459894 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.566545963 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.566723108 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.566737890 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.568290949 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.568388939 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.568448067 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.568589926 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.568595886 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.568605900 CEST	49760	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.568609953 CEST	443	49760	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.571217060 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.571239948 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.571335077 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.571455002 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.571466923 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.593199968 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.593379974 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.593461037 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.593624115 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.593641043 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.593652964 CEST	49761	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.593661070 CEST	443	49761	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.597522974 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.597557068 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.597645044 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.597811937 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.597821951 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.600709915 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.600802898 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.600864887 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.600955963 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.600974083 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.600991011 CEST	49753	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.600996971 CEST	443	49753	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.603373051 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.603400946 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.603483915 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.603573084 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.603585958 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.870412111 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.871244907 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.871273041 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.871984959 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.871990919 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.881253004 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.881820917 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.881843090 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.882277012 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.882281065 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.901314020 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.901844978 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.901880026 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.902018070 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.902376890 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.902383089 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.902498960 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.902518034 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.902790070 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.902793884 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.918411970 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.918848991 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.918869019 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:36.919255018 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:36.919260979 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.074800014 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.074990988 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.075062037 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.075226068 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.075246096 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.075256109 CEST	49762	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.075264931 CEST	443	49762	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.078902006 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.078948021 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.079186916 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.079375982 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.079386950 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.084100962 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.087359905 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.087419033 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.087480068 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.087498903 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.087512016 CEST	49764	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.087518930 CEST	443	49764	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.091129065 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.091181040 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.091255903 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.091459990 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.091475964 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.112920046 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115447044 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115556002 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.115556002 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.115592957 CEST	49766	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.115612984 CEST	443	49766	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115731001 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115756035 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115875959 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.115937948 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116061926 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116070032 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.116081953 CEST	49765	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116089106 CEST	443	49765	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.116436958 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.116491079 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116539955 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116553068 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.116564989 CEST	49763	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.116569996 CEST	443	49763	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.118799925 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.118895054 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.118998051 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119088888 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119088888 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119119883 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.119122982 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.119133949 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119169950 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.119193077 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119206905 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119261026 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119273901 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.119326115 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.119343996 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.375571012 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.376281023 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.376318932 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.377726078 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.377738953 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.386555910 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.387042046 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.387065887 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.387535095 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.387541056 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.412909031 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.413455009 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.413501978 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.413877010 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.413887024 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.416318893 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.416729927 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.416755915 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.416959047 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.417233944 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.417239904 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.417330027 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.417363882 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.417752981 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.417763948 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.594393969 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.594475985 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.594556093 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.594928980 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.594928980 CEST	49768	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.594948053 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.594961882 CEST	443	49768	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.598144054 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.598182917 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.598447084 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.598500967 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.598507881 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.614661932 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.614684105 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.614772081 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.614856005 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.614866018 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.614918947 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.615063906 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.615077019 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.615101099 CEST	49771	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.615107059 CEST	443	49771	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.615143061 CEST	49770	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.615160942 CEST	443	49770	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.619419098 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619426012 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619451046 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.619465113 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.619539022 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619654894 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619740963 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619755983 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.619792938 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.619811058 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.628289938 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.628371954 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.628437042 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.628596067 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.628609896 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.628624916 CEST	49769	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.628632069 CEST	443	49769	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.631778002 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.631822109 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.632078886 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.632112026 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.632119894 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.710705996 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.710797071 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.710911036 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.711226940 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.711246014 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.711256981 CEST	49767	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.711265087 CEST	443	49767	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.715181112 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.715210915 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.715317965 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.715467930 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.715477943 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.740372896 CEST	49672	443	192.168.2.17	52.123.128.14
Apr 2, 2025 16:42:37.884412050 CEST	49673	443	192.168.2.17	204.79.197.203
Apr 2, 2025 16:42:37.904884100 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.905708075 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.905740023 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.906256914 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.906265974 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.928286076 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.929177999 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.929212093 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.929686069 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.929692030 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.932535887 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.933257103 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.933293104 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.933665037 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.933693886 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.933702946 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.934104919 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.934129000 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:37.934531927 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:37.934539080 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.021706104 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.022475958 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.022492886 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.023057938 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.023061991 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.109838963 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.109926939 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.110003948 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.110219955 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.110240936 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.110256910 CEST	49772	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.110260963 CEST	443	49772	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.113599062 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.113648891 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.113775969 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.113972902 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.113989115 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.130513906 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.130594969 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.130650043 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.130948067 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.130969048 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.130985022 CEST	49773	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.130990982 CEST	443	49773	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.132369995 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.132549047 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.132625103 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.132736921 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.132736921 CEST	49775	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.132752895 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.132765055 CEST	443	49775	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.133459091 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.133852005 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.133935928 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134020090 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134020090 CEST	49774	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134063005 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.134094954 CEST	443	49774	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.134641886 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134684086 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.134782076 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134974957 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.134989977 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.135327101 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.135358095 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.135427952 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.135564089 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.135577917 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.136029005 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.136038065 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.136091948 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.136193991 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.136203051 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.235735893 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.283375025 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.283397913 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.283592939 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.283592939 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.283607960 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.283977032 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.284033060 CEST	443	49776	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.284080029 CEST	49776	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.287224054 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.287260056 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.287344933 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.287504911 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.287517071 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.412847042 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.413574934 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.413595915 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.414159060 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.414164066 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.435863972 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.436578989 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.436609983 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.437060118 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.437064886 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.441849947 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.442265987 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.442300081 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.442698002 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.442703962 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.445982933 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.446335077 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.446352005 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.446749926 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.446754932 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.589262009 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.589922905 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.589942932 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.590497971 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.590502977 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.620379925 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.620465994 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.620534897 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.620799065 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.620799065 CEST	49777	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.620821953 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.620836020 CEST	443	49777	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.624799013 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.624844074 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.624943018 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.625121117 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.625133991 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.634217024 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.635071039 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.635154963 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.635205030 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.635221958 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.635234118 CEST	49778	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.635241032 CEST	443	49778	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.638673067 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.638700962 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.638786077 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.638959885 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.638972044 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.649801016 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.649982929 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.650058985 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.650120020 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.650137901 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.650149107 CEST	49779	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.650156021 CEST	443	49779	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.653841972 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.653875113 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.653963089 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.654180050 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.654192924 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.665169001 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.665424109 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.665483952 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.665517092 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.665535927 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.665549040 CEST	49780	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.665555954 CEST	443	49780	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.668370008 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.668464899 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.668548107 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.669801950 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.669837952 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.791893005 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.791991949 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.792068005 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.792298079 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.792315006 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.792325974 CEST	49781	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.792332888 CEST	443	49781	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.796207905 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.796261072 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.796364069 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.796535015 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.796547890 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.928652048 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.929497004 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.929516077 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.929991961 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.929996967 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.938196898 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.938760996 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.938788891 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.939245939 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.939253092 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.957824945 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.958477974 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.958513975 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.958997011 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.959003925 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.971693039 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.972429037 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.972467899 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:38.973023891 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:38.973042965 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.102360010 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.103013992 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.103048086 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.103527069 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.103542089 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.122045040 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.122473001 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.122539997 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.122601032 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.122617960 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.122627020 CEST	49782	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.122636080 CEST	443	49782	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.126477003 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.126533031 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.126610041 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.126784086 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.126806021 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.134557009 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.134771109 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.134830952 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.134865999 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.134881020 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.134892941 CEST	49783	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.134905100 CEST	443	49783	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.137634993 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.137666941 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.137742043 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.137897015 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.137914896 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.167762041 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.167921066 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.167987108 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.168167114 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.168201923 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.168231964 CEST	49785	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.168247938 CEST	443	49785	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.171535015 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.171571970 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.171660900 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.171793938 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.171812057 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.205252886 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.205602884 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.205780029 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.205853939 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.205853939 CEST	49784	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.205893993 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.205940008 CEST	443	49784	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.209438086 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.209522009 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.209619045 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.209788084 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.209825039 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.303935051 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.304397106 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.304507971 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.304550886 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.304550886 CEST	49786	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.304569960 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.304580927 CEST	443	49786	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.308280945 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.308325052 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.308440924 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.308634996 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.308649063 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.427685022 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.428500891 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.428536892 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.429019928 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.429025888 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.445688963 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.446439028 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.446468115 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.446926117 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.446933031 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.523005009 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.523844957 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.523871899 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.524332047 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.524338961 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.615444899 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.616286039 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.616314888 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.616955996 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.616961956 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.627372026 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.627448082 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.627521992 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.627784967 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.627804995 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.627816916 CEST	49787	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.627823114 CEST	443	49787	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.631324053 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.631335020 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.631433010 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.631607056 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.631618023 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.646223068 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.646413088 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.646493912 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.646706104 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.646716118 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.646728992 CEST	49788	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.646733046 CEST	443	49788	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.650013924 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.650078058 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.650168896 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.650379896 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.650393963 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.721080065 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.721157074 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.721293926 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.721533060 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.721553087 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.721563101 CEST	49790	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.721568108 CEST	443	49790	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.725394964 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.725442886 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.725696087 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.726058960 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.726073980 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.814232111 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.815139055 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.815237045 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.815298080 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.815310001 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.815323114 CEST	49791	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.815330029 CEST	443	49791	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.818757057 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.818793058 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.818878889 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.819077015 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.819101095 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.901849031 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.902631044 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.902661085 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.903171062 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.903177977 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.926434994 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.927176952 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.927211046 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.927673101 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.927679062 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.971555948 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.972260952 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.972289085 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:39.972657919 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:39.972666979 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.020487070 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.021289110 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.021311998 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.021821022 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.021826029 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.125384092 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126051903 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126087904 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126209021 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126293898 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126357079 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126523018 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126538038 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126554966 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126555920 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126566887 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126597881 CEST	49789	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126605034 CEST	443	49789	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126630068 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126697063 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126780033 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126799107 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.126808882 CEST	49792	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.126816034 CEST	443	49792	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.130573988 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130587101 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.130616903 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130651951 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.130719900 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130817890 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130820036 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130829096 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.130939007 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.130948067 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.183109045 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.183549881 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.183631897 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.183689117 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.183708906 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.183720112 CEST	49793	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.183727980 CEST	443	49793	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.187252045 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.187278986 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.187354088 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.187551022 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.187557936 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.220336914 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.275419950 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.275450945 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.275733948 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.275763035 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.275897980 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.275978088 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.276015997 CEST	443	49794	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.276094913 CEST	49794	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.279318094 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.279352903 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.279437065 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.279592991 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.279606104 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.328877926 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.328958988 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.329118013 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.329358101 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.329358101 CEST	49795	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.329375029 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.329382896 CEST	443	49795	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.333831072 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.333928108 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.334079981 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.334275961 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.334342957 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.442502975 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.443469048 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.443489075 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.443902016 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.443906069 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.500364065 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.501204014 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.501219034 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.501827002 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.501832008 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.517349005 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.518074036 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.518105030 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.518517017 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.518522024 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.590831995 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.591712952 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.591741085 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.592390060 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.592397928 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.650424004 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.653202057 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.653311014 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.653346062 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.653367043 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.653381109 CEST	49797	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.653388977 CEST	443	49797	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.655143976 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.655654907 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.655688047 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.656117916 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.656124115 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.657852888 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.657934904 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.658032894 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.658164978 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.658196926 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.717732906 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.717945099 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.718070030 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.718452930 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.718472004 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.718485117 CEST	49798	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.718491077 CEST	443	49798	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.722224951 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.722271919 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.722400904 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.722677946 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.722693920 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.731106043 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.731271029 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.731374979 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.731532097 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.731532097 CEST	49796	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.731549025 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.731558084 CEST	443	49796	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.734673023 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.734709024 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.734777927 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.735025883 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.735034943 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.815717936 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.816088915 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.816174030 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.816265106 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.816281080 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.816294909 CEST	49799	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.816301107 CEST	443	49799	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.820142984 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.820189953 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.820302963 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.820549011 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.820561886 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.873656988 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.873742104 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.873852015 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.874135971 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.874172926 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.874202013 CEST	49800	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.874214888 CEST	443	49800	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.878268957 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.878307104 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.878402948 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.878586054 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.878604889 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.972526073 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.973321915 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.973361015 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:40.973892927 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:40.973897934 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.051300049 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.052059889 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.052093983 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.052575111 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.052581072 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.128827095 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.129494905 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.129519939 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.130151033 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.130156040 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.175411940 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.175648928 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.175751925 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.175976992 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.175995111 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.176011086 CEST	49801	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.176016092 CEST	443	49801	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.179626942 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.179929018 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.179948092 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.180046082 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.180202007 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.180236101 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.180280924 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.180291891 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.180819035 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.180826902 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.244998932 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.245178938 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.245290041 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.245598078 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.245623112 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.245635986 CEST	49803	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.245641947 CEST	443	49803	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.249367952 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.249449968 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.249562979 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.249811888 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.249842882 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.330246925 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.330919981 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.331010103 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.331058025 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.331079960 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.331095934 CEST	49804	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.331100941 CEST	443	49804	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.334842920 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.334886074 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.334979057 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.335196972 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.335211039 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.377886057 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.377912998 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.377978086 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.378021955 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.378057957 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.378396034 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.378412962 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.378428936 CEST	49805	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.378434896 CEST	443	49805	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.383105993 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.383151054 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.383260012 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.383502007 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.383512020 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.495507002 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.496377945 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.496417046 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.496895075 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.496901035 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.510162115 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.510782957 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.510813951 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.511210918 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.511215925 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.557590008 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.558336973 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.558379889 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.558908939 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.558917999 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.684520006 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.685303926 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.685321093 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.685875893 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.685882092 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.712636948 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.713736057 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.713846922 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.713879108 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.713903904 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.713967085 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.713994980 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.714010000 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.714026928 CEST	49802	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.714032888 CEST	443	49802	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.721081018 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.721116066 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.721230030 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.721443892 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.721456051 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.722666979 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.723169088 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.723206043 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.723669052 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.723675966 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.759705067 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.759725094 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.759830952 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.759859085 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.760075092 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.760137081 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.760241985 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.760265112 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.760281086 CEST	49807	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.760286093 CEST	443	49807	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.764193058 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.764225960 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.764405966 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.764615059 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.764622927 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.784666061 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.785896063 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.786001921 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.786022902 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.786034107 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.786057949 CEST	49806	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.786062956 CEST	443	49806	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.790034056 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.790076971 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.790205956 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.790376902 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.790391922 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.891174078 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.891201019 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.891269922 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.891351938 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.891390085 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.891683102 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.891699076 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.891709089 CEST	49809	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.891716003 CEST	443	49809	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.896009922 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.896044016 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.896142006 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.896306038 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.896318913 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.954633951 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.954655886 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.954746008 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.954804897 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.954853058 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.955127954 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.955153942 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.955171108 CEST	49808	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.955178976 CEST	443	49808	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.958585978 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.958635092 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:41.958755016 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.958945990 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:41.958962917 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.036101103 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.036830902 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.036850929 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.037414074 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.037421942 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.063317060 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.064110041 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.064127922 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.064646959 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.064660072 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.091286898 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.092047930 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.092067003 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.092845917 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.092850924 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.191791058 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.192495108 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.192512989 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.193033934 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.193038940 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.239187956 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.239888906 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.239962101 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.240048885 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.240067959 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.240082026 CEST	49810	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.240087986 CEST	443	49810	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.243401051 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.243434906 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.243524075 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.243777990 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.243792057 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.255834103 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.256653070 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.256688118 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.257168055 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.257173061 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.261955023 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.262052059 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.262134075 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.262418032 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.262418032 CEST	49811	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.262432098 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.262442112 CEST	443	49811	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.265921116 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.265949965 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.266043901 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.266233921 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.266247988 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.285944939 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.286139965 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.286242962 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.286242962 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.286242962 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.289346933 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.289395094 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.289463997 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.289607048 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.289624929 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.385413885 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.385674000 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.385747910 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.385909081 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.385927916 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.385937929 CEST	49813	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.385943890 CEST	443	49813	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.389718056 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.389760971 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.389873028 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.390029907 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.390047073 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.454195023 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.454260111 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.454396009 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.454679966 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.454699039 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.454711914 CEST	49814	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.454719067 CEST	443	49814	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.458272934 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.458285093 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.458378077 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.458564043 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.458575964 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.547700882 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.548368931 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.548420906 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.548922062 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.548938990 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.567708015 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.568324089 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.568350077 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.568862915 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.568867922 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.590661049 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.591201067 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.591238022 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.591615915 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.591620922 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.600631952 CEST	49812	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.600655079 CEST	443	49812	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.692924976 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.693646908 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.693681002 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.694154024 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.694160938 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.744509935 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.744580030 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.744682074 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.745002031 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.745023012 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.745034933 CEST	49815	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.745040894 CEST	443	49815	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.748660088 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.748692036 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.748811007 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.749046087 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.749058962 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.755678892 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.756591082 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.756609917 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.757173061 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.757179976 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.760895967 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.761302948 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.761396885 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.761533976 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.761554003 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.761569977 CEST	49816	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.761575937 CEST	443	49816	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.765084982 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.765125036 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.765222073 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.765475035 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.765486956 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.792587996 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.792681932 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.792767048 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.793056965 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.793073893 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.793086052 CEST	49817	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.793091059 CEST	443	49817	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.796888113 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.796917915 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.797002077 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.797179937 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.797192097 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.932152987 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.932651997 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.932748079 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.932817936 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.932833910 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.932853937 CEST	49818	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.932859898 CEST	443	49818	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.936521053 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.936558008 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.936669111 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.936909914 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.936923981 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.953131914 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.953368902 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.953445911 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.953533888 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.953552008 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.953563929 CEST	49819	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.953569889 CEST	443	49819	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.957274914 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.957315922 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:42.957392931 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.957648993 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:42.957662106 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.064747095 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.065444946 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.065571070 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.065603971 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.065928936 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.065962076 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.066139936 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.066147089 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.066458941 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.066464901 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.096525908 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.097332001 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.097368956 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.098004103 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.098018885 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.244379997 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.245197058 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.245246887 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.245699883 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.245711088 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.262619972 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.262723923 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.262803078 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.262813091 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.263129950 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.263154030 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.263175011 CEST	49821	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.263180017 CEST	443	49821	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.263386965 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.263421059 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.263824940 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.263834953 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.266709089 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.266906023 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.266964912 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.266976118 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.267031908 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267035961 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267071009 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.267085075 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267098904 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.267115116 CEST	49820	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267121077 CEST	443	49820	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.267158985 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267322063 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.267335892 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.269742012 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.269776106 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.269855022 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.269973993 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.269990921 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.313433886 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.313467979 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.313529015 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.313553095 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.313600063 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.313878059 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.313889027 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.313906908 CEST	49822	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.313913107 CEST	443	49822	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.317611933 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.317646980 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.317730904 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.317884922 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.317898989 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.453614950 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.454844952 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.454935074 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.454991102 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.455008030 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.455018997 CEST	49823	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.455024004 CEST	443	49823	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.458244085 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.458283901 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.458394051 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.458586931 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.458601952 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.475425005 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.475821018 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.475910902 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.475938082 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.475954056 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.475970030 CEST	49824	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.475975037 CEST	443	49824	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.479537010 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.479567051 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.479687929 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.479810953 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.479826927 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.567648888 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.568480968 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.568516016 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.569159985 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.569170952 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.606076002 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.607007980 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.607052088 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.607402086 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.607409000 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.621608019 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.622433901 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.622482061 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.623076916 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.623083115 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.782069921 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.782824993 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.782840014 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.783324957 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.783329010 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812335014 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812427998 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812525988 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.812711000 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812769890 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812828064 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.812922955 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.812937975 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.812952995 CEST	49825	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.812958956 CEST	443	49825	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.813054085 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.813074112 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.813090086 CEST	49827	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.813097954 CEST	443	49827	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.817131042 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817157030 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.817200899 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817217112 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.817256927 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817315102 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817408085 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817420006 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.817529917 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.817543983 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.899425983 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.900286913 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.900327921 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.900928020 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.900934935 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.983319044 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.983733892 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.983834982 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.983885050 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.983901024 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.983913898 CEST	49829	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.983918905 CEST	443	49829	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.987380028 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.987431049 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:43.987549067 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.987776995 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:43.987792969 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.099220037 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.100756884 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.100832939 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.100874901 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.100892067 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.100905895 CEST	49828	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.100913048 CEST	443	49828	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.105046988 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.105098963 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.105190039 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.105360031 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.105372906 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.111994982 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.112515926 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.112545013 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.113181114 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.113184929 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.151124954 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.151787996 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.151813984 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.152292967 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.152297974 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.290510893 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.291343927 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.291373014 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.292026043 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.292032957 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.309439898 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.309497118 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.309564114 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.309870005 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.309886932 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.309899092 CEST	49830	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.309906006 CEST	443	49830	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.314553022 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.314591885 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.314717054 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.314975977 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.314989090 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.347640991 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.347876072 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.347918034 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.347923994 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.347965002 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.348129034 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.348139048 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.348150969 CEST	49831	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.348155022 CEST	443	49831	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.351990938 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.352032900 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.352124929 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.352245092 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.352267981 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.404558897 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.405308008 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.405339003 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.407077074 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.407083035 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.485831976 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.486229897 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.486295938 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.486339092 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.486414909 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.486464024 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.486485004 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.486495972 CEST	49826	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.486500978 CEST	443	49826	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.490530968 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.490569115 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.490664005 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.490833044 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.490843058 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.603323936 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.603424072 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.603542089 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.603944063 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.603964090 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.603976011 CEST	49833	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.603991985 CEST	443	49833	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.608530998 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.608567953 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.608690977 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.608916998 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.608927011 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.613181114 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.614039898 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.614052057 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.614764929 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.614769936 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.653453112 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.654325962 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.654350996 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.654884100 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.654901981 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.780021906 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.780817986 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.780847073 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.781472921 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.781477928 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.803622007 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.803706884 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.803788900 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.804035902 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.804060936 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.804074049 CEST	49834	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.804081917 CEST	443	49834	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.808007002 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.808046103 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.808159113 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.808353901 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.808366060 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.882266045 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.883023977 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.883171082 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.883284092 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.883284092 CEST	49835	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.883304119 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.883308887 CEST	443	49835	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.886776924 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.886831045 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.886924982 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.887085915 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.887100935 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.903043032 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.904443026 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.904460907 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.905170918 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.905177116 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.981172085 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.981205940 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.981261969 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.981416941 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.981739044 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.981739044 CEST	49836	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.981759071 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.981770039 CEST	443	49836	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.985481024 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.985517025 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:44.985773087 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.985999107 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:44.986016035 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.101407051 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.101491928 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.101613045 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.101883888 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.101921082 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.101942062 CEST	49837	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.101953030 CEST	443	49837	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.106189966 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.106256008 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.106349945 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.106509924 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.106528997 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.117383957 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.117939949 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.117964983 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.118453979 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.118458986 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.123213053 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.137797117 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.137855053 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.137938976 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.137996912 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.138025999 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.138044119 CEST	49832	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.138051987 CEST	443	49832	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.141554117 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.141597986 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.141680002 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.141868114 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.141881943 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.184026957 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.184709072 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.184753895 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.185230970 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.185242891 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.282303095 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.283073902 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.283094883 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.283699989 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.283704996 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.316451073 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.318377972 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.318439007 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.318478107 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.318491936 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.318499088 CEST	49838	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.318506956 CEST	443	49838	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.322137117 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.322189093 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.322300911 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.322487116 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.322501898 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.381618023 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.381696939 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.381786108 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.382069111 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.382095098 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.382108927 CEST	49839	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.382117987 CEST	443	49839	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.386496067 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.386559963 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.386672020 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.386919022 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.386945009 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.404925108 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.405670881 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.405700922 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.406230927 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.406238079 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.442965031 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.443677902 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.443717003 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.444180965 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.444188118 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.475471020 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.475574970 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.475630045 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.475734949 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.476032019 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.476032019 CEST	49840	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.476047993 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.476064920 CEST	443	49840	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.479876995 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.479921103 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.480026007 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.480216980 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.480235100 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.621088982 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.621959925 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.621989965 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.622641087 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.622648954 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.653523922 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.653708935 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.653781891 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.654048920 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.654059887 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.654073954 CEST	49842	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.654078007 CEST	443	49842	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.658464909 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.658499956 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.658612013 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.658832073 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.658844948 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.691823959 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.692727089 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.692754030 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.693263054 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.693270922 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.783257961 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.783998013 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.784018993 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.784554005 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.784559965 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.793498993 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.793598890 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.793663979 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.793895006 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.793910027 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.793924093 CEST	49841	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.793929100 CEST	443	49841	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.797687054 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.797718048 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.797837019 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.798007965 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.798024893 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.832947016 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.833760023 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.833849907 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.833880901 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.833900928 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.833915949 CEST	49843	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.833925009 CEST	443	49843	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.837626934 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.837676048 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.837768078 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.837940931 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.837954044 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.893872023 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.893904924 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.893964052 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.894037962 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.894076109 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.894402981 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.894416094 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.894433975 CEST	49844	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.894442081 CEST	443	49844	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.898096085 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.898125887 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.898228884 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.898381948 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.898396969 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.961934090 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.962758064 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.962781906 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.963247061 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.963259935 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.984822989 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.984898090 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.984982014 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.985255003 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.985274076 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.985292912 CEST	49845	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.985301018 CEST	443	49845	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.989237070 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.989264011 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:45.989559889 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.989559889 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:45.989586115 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.129209995 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.129861116 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.129868031 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.129884005 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.130240917 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.130271912 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.130486012 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.130492926 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.131006956 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.131014109 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.155683041 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.155888081 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.155985117 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.156133890 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.156147957 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.156162024 CEST	49846	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.156167030 CEST	443	49846	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.160275936 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.160324097 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.160422087 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.160712957 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.160736084 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.188240051 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.189220905 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.189246893 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.189788103 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.189795017 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.290533066 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.291657925 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.291690111 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.292373896 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.292380095 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.324301958 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.324493885 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.324548960 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.324561119 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.324596882 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.324835062 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.324851036 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.324865103 CEST	49848	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.324871063 CEST	443	49848	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.328947067 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.329004049 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.329093933 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.329277992 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.329297066 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.334538937 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.335284948 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.335345030 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.335380077 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.335396051 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.335407972 CEST	49847	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.335413933 CEST	443	49847	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.338011980 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.338048935 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.338112116 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.338249922 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.338259935 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.387099028 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.387166977 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.387223005 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.387546062 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.387573957 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.387587070 CEST	49849	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.387594938 CEST	443	49849	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.391752958 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.391803026 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.391885996 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.392066002 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.392077923 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.462100983 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.462924004 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.462944984 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.463421106 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.463428974 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.487620115 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.487652063 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.487708092 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.487797022 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.487850904 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.488121033 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.488142014 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.488152981 CEST	49850	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.488161087 CEST	443	49850	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.491933107 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.491971016 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.492070913 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.492325068 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.492340088 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.634592056 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.635448933 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.635471106 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.635950089 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.635956049 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.635967970 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.636519909 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.636542082 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.636949062 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.636953115 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.659492970 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.659696102 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.659770012 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.659991026 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.660008907 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.660022020 CEST	49851	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.660029888 CEST	443	49851	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.663587093 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.663619041 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.663733959 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.663906097 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.663927078 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.797844887 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.798537970 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.798577070 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.799072981 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.799078941 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.830921888 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.832068920 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.832169056 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.832209110 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.832209110 CEST	49853	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.832226992 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.832236052 CEST	443	49853	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.835988998 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.836051941 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.836292982 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.836355925 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.836369991 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.967010021 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.967782021 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.967818975 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:46.968307972 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:46.968322039 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.003602028 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.003681898 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.003760099 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.004070044 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.004090071 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.004105091 CEST	49855	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.004112005 CEST	443	49855	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.007812977 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.007879972 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.007997036 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.008193016 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.008212090 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.129795074 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.130434036 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.130462885 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.130944967 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.130950928 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134545088 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134638071 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134694099 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.134707928 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134757996 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134808064 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.134834051 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.134852886 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.134864092 CEST	49852	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.134871006 CEST	443	49852	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.138478041 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.138525009 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.138617039 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.138763905 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.138780117 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.156908035 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.157037973 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.157085896 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.157116890 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.157150984 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.157341957 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.157358885 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.157373905 CEST	49856	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.157378912 CEST	443	49856	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.160706043 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.160742044 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.160824060 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.161056995 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.161072969 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.300380945 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.301208019 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.301245928 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.301999092 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.302005053 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.316227913 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.316591024 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.316678047 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.316767931 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.316788912 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.316806078 CEST	49857	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.316812038 CEST	443	49857	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.320485115 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.320522070 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.320621014 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.320844889 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.320858955 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.431657076 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.432399035 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.432420015 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.432972908 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.432981968 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.446513891 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.447252989 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.447284937 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.447732925 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.447741032 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.620358944 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.621208906 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.621239901 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.621745110 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.621756077 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.624032021 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.624329090 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.624437094 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.624509096 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.624528885 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.624543905 CEST	49859	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.624548912 CEST	443	49859	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.628271103 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.628321886 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.628443003 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.628591061 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.628613949 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.634232044 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.634310961 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.634381056 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.634603024 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.634615898 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.634628057 CEST	49858	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.634633064 CEST	443	49858	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.638721943 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.638753891 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.638851881 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.639039040 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.639053106 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.643867970 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.644325018 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.644376040 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.644385099 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.644433022 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.644483089 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.644490957 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.644501925 CEST	49860	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.644506931 CEST	443	49860	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.647840023 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.647874117 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.648026943 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.648144960 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.648159981 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.818990946 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.819453001 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.819585085 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.819585085 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.819585085 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.823267937 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.823302031 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.823462963 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.823577881 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.823587894 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.825757980 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.826203108 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.826258898 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.826687098 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.826692104 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.937212944 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.937994957 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.938023090 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.938564062 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.938569069 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.940814018 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.941324949 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.941401958 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.941728115 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.941744089 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.944179058 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.944782972 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.944797039 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:47.945082903 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:47.945089102 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.020680904 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.020709991 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.020750046 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.020869970 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.020936966 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.021248102 CEST	49854	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.021255970 CEST	443	49854	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.025392056 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.025430918 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.025544882 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.025701046 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.025712013 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.131355047 CEST	49861	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.131373882 CEST	443	49861	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.132769108 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.132873058 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.132917881 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.133151054 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.133163929 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.133177996 CEST	49863	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.133184910 CEST	443	49863	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.133411884 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.133894920 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.133913040 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.134372950 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.134377956 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.137299061 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.137326002 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.137391090 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.137543917 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.137552023 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.140166998 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.140249014 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.140330076 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.140485048 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.140485048 CEST	49864	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.140499115 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.140507936 CEST	443	49864	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.143107891 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.143119097 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.143197060 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.143321991 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.143330097 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.145528078 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.145576000 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.145620108 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.145627022 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.145661116 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.145832062 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.145853043 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.145862103 CEST	49862	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.145868063 CEST	443	49862	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.148494959 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.148518085 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.148597956 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.148736000 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.148744106 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.323901892 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.324660063 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.324681044 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.325221062 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.325226068 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.329231977 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.329766035 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.329847097 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.329935074 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.329962015 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.329973936 CEST	49865	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.329988003 CEST	443	49865	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.333648920 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.333683968 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.333817005 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.333986044 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.334003925 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.445348024 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.446115971 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.446140051 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.446695089 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.446701050 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.450418949 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.451016903 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.451037884 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.451488972 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.451493979 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.456310034 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.456840992 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.456871986 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.457297087 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.457302094 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.564510107 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.564532995 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.564582109 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.564677954 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.564708948 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.564990044 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.565010071 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.565021038 CEST	49866	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.565026999 CEST	443	49866	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.568698883 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.568742037 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.568901062 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.569129944 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.569137096 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.636818886 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.637538910 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.637567997 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.638117075 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.638122082 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.643671036 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.643759012 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.643822908 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.644027948 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.644052982 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.644061089 CEST	49867	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.644069910 CEST	443	49867	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.647579908 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.647609949 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.647722006 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.647885084 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.647901058 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.648777008 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.649552107 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.649600029 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.649609089 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.649663925 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.649710894 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.649729967 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.649741888 CEST	49868	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.649749041 CEST	443	49868	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.652337074 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.652431011 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.652694941 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.652695894 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.652821064 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.654594898 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.654685020 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.654752016 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.654886961 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.654903889 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.654913902 CEST	49869	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.654920101 CEST	443	49869	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.657715082 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.657741070 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.657841921 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.658009052 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.658024073 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.835072994 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.835640907 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.835747004 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.835870981 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.835870981 CEST	49870	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.835897923 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.835907936 CEST	443	49870	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.839387894 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.839418888 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.839528084 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.839716911 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.839730024 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.881226063 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.882018089 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.882035971 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.882828951 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.882834911 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.951097965 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.951617002 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.951852083 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.951869965 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.952128887 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.952146053 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.952497959 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.952503920 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.952620029 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.952625036 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.959620953 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.960221052 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.960247993 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:48.960755110 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:48.960761070 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.091351032 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.091419935 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.091566086 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.091846943 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.091846943 CEST	49871	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.091864109 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.091872931 CEST	443	49871	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.097567081 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.097601891 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.097697973 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.097902060 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.097908020 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.135349035 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.135945082 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.135970116 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.136579037 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.136584997 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.147176027 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.147680044 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.147739887 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.147779942 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.147798061 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.147814989 CEST	49872	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.147824049 CEST	443	49872	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.151412010 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.151448965 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.151535988 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.151719093 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.151734114 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.156630039 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.156706095 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.156763077 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.156987906 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.156999111 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.157013893 CEST	49874	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.157017946 CEST	443	49874	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.160022974 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.160052061 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.160136938 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.160327911 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.160346031 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.172377110 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.178138018 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.178215981 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.178241968 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.178251028 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.178267956 CEST	49873	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.178272963 CEST	443	49873	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.181824923 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.181854010 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.181953907 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.182104111 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.182121992 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.330075979 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.330161095 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.330229044 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.330528975 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.330549955 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.330562115 CEST	49875	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.330566883 CEST	443	49875	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.334321022 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.334356070 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.334459066 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.334623098 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.334635973 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.401691914 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.402494907 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.402524948 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.403126955 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.403134108 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.452119112 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.452841043 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.452883005 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.453429937 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.453440905 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.462225914 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.462912083 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.462954998 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.463418007 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.463424921 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.487821102 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.488616943 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.488653898 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.489198923 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.489204884 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.602907896 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.603667974 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.603724003 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.603741884 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.603792906 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.603868008 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.603880882 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.603899956 CEST	49876	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.603904009 CEST	443	49876	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.608014107 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.608045101 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.608272076 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.608623981 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.608632088 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.632087946 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.633264065 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.633285999 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.633797884 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.633804083 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.653112888 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.653239012 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.653445005 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.653676033 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.653697014 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.653709888 CEST	49877	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.653714895 CEST	443	49877	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.658107996 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.658166885 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.658267021 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.658469915 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.658485889 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.660881996 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.661195993 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.661286116 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.661375046 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.661375046 CEST	49878	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.661420107 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.661448956 CEST	443	49878	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.664761066 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.664803028 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.664901972 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.665060043 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.665071964 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.687453032 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.687764883 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.687869072 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.687918901 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.687918901 CEST	49879	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.687938929 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.687951088 CEST	443	49879	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.691343069 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.691370010 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.691461086 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.691601038 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.691610098 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.828938961 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.828962088 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.829042912 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.829071045 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.829113960 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.829406977 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.829427004 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.829441071 CEST	49880	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.829446077 CEST	443	49880	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.833158970 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.833198071 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.833327055 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.833535910 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.833547115 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.901062012 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.901834011 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.901844978 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.902374983 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.902379990 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.962488890 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.963346004 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.963373899 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.963850021 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.963855982 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.987927914 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.988759995 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.988818884 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:49.989243031 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:49.989248991 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.000472069 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.001259089 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.001291990 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.001770020 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.001779079 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.097374916 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.099488974 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.099575996 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.099606991 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.099668980 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.099776030 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.099787951 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.099834919 CEST	49881	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.099842072 CEST	443	49881	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.103482008 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.103514910 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.103620052 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.103760004 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.103769064 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.141984940 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.142563105 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.142595053 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.143096924 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.143101931 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.156152010 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.156466007 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.156531096 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.156555891 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.156569004 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.156580925 CEST	49883	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.156586885 CEST	443	49883	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.159786940 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.159817934 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.159914970 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.160032988 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.160044909 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.194084883 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.194344997 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.194403887 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.194417000 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.194473982 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.194653988 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.194672108 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.194685936 CEST	49882	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.194691896 CEST	443	49882	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.198213100 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.198247910 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.198353052 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.198482037 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.198493958 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.350841999 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.352530003 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.352660894 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.352695942 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.352695942 CEST	49885	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.352713108 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.352722883 CEST	443	49885	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.356471062 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.356504917 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.356672049 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.356817007 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.356825113 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.393893003 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.394599915 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.394614935 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.395132065 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.395137072 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.449853897 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.450576067 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.450596094 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.451354980 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.451360941 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.486093998 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.486746073 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.486769915 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.487337112 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.487341881 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587130070 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587145090 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587229967 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.587235928 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587405920 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587452888 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.587676048 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.587686062 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.587694883 CEST	49886	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.587701082 CEST	443	49886	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.591351986 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.591386080 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.591490030 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.591667891 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.591681957 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.641809940 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.642236948 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.642318964 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.642383099 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.642383099 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.642487049 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.642487049 CEST	49887	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.642503023 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.642512083 CEST	443	49887	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.645941973 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.645986080 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.646089077 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.646217108 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.646228075 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.659849882 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.660576105 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.660595894 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.661082029 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.661092997 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.815951109 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.815987110 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.816057920 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.816087961 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.816155910 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.816370010 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.816387892 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.816402912 CEST	49888	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.816409111 CEST	443	49888	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.819941998 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.819988966 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.820106030 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.820324898 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.820338964 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.863118887 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.863219976 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.863317013 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.863558054 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.863558054 CEST	49889	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.863579988 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.863593102 CEST	443	49889	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.867203951 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.867240906 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.867366076 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.867594957 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.867607117 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.890513897 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.891181946 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.891217947 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.891813993 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.891820908 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.977916956 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.978650093 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.978683949 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:50.979159117 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:50.979163885 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.082736015 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.083319902 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.083379030 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.083501101 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.083517075 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.083529949 CEST	49890	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.083535910 CEST	443	49890	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.087678909 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.087733984 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.087918997 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.088093996 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.088119984 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.119359016 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.119995117 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.120016098 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.120506048 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.120515108 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.160476923 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.161143064 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.161169052 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.161708117 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.161715984 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.171669960 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.172305107 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.172383070 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.172425032 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.172442913 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.172452927 CEST	49891	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.172458887 CEST	443	49891	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.177895069 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.177933931 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.178073883 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.178272963 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.178282976 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.318782091 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.318831921 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.318896055 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.318989992 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.319055080 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.319340944 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.319360971 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.319372892 CEST	49892	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.319380999 CEST	443	49892	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.323235989 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.323282003 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.323410988 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.323573112 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.323591948 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.356436968 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.356651068 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.356750965 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.356899977 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.356919050 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.356930971 CEST	49893	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.356939077 CEST	443	49893	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.360835075 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.360866070 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.361016035 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.361228943 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.361238956 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.383991003 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.384854078 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.384881973 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.385792017 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.385797024 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.495172977 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.495836020 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.495857954 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.496397018 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.496402025 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.586720943 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.586824894 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.586894989 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.586941957 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.586960077 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.587228060 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.587228060 CEST	49894	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.587245941 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.587256908 CEST	443	49894	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.590889931 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.590922117 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.591022968 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.591217041 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.591227055 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.621740103 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.622437954 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.622472048 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.622981071 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.622987986 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.659744024 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.660474062 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.660494089 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.660876036 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.660880089 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.693324089 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.693470955 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.693527937 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.693733931 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.693747997 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.693763971 CEST	49895	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.693772078 CEST	443	49895	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.697403908 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.697441101 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.697551966 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.697782993 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.697794914 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.822881937 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.822932959 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.822979927 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.822999954 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.823041916 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.823293924 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.823312998 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.823327065 CEST	49896	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.823334932 CEST	443	49896	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.826390982 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.826425076 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.826508045 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.826651096 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.826663971 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.860280037 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.860357046 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.860430002 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.860678911 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.860691071 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.860704899 CEST	49897	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.860708952 CEST	443	49897	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.864073038 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.864103079 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.864172935 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.864334106 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.864346981 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.894850969 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.895490885 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.895507097 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.896291018 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:51.896296024 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:51.999380112 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.000134945 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.000164032 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.000682116 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.000691891 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.090316057 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.090390921 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.090534925 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.090843916 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.090867996 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.090881109 CEST	49898	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.090886116 CEST	443	49898	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.094433069 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.094476938 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.094578028 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.094732046 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.094748020 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.121589899 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.122240067 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.122284889 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.122742891 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.122747898 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.157380104 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.157924891 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.157968044 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.158381939 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.158392906 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182056904 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182732105 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182790041 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.182809114 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182828903 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182887077 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.182920933 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.182939053 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.182950020 CEST	49884	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.182956934 CEST	443	49884	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.186255932 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.186306000 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.186388016 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.186561108 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.186578989 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.224745989 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.226157904 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.226232052 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.226298094 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.226315975 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.226325989 CEST	49899	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.226330996 CEST	443	49899	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.230704069 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.230739117 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.230818033 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.230992079 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.231000900 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.317409992 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.317675114 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.317761898 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.317909956 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.317922115 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.317933083 CEST	49900	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.317938089 CEST	443	49900	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.321475029 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.321511030 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.321594000 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.321764946 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.321779966 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.351378918 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.352083921 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.352179050 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.352219105 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.352219105 CEST	49901	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.352236032 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.352247953 CEST	443	49901	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.355231047 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.355272055 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.355364084 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.355475903 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.355487108 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.390930891 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.391546965 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.391583920 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.392050028 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.392055988 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.483572006 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.484335899 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.484368086 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.484847069 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.484852076 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.527364016 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.528261900 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.528281927 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.528775930 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.528780937 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.585609913 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.585649014 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.585700989 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.585740089 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.585776091 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.586036921 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.586052895 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.586061001 CEST	49902	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.586066008 CEST	443	49902	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.589462996 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.589510918 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.589598894 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.589807987 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.589823961 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.624548912 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.625202894 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.625241995 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.625720978 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.625729084 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.652036905 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.652703047 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.652733088 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.653177023 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.653182030 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.711694956 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.711802006 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.711956978 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.712249994 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.712275982 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.712295055 CEST	49903	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.712301016 CEST	443	49903	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.715945005 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.715998888 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.716104984 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.716321945 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.716339111 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.729830980 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.729981899 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.730041027 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.730062962 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.730117083 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.730288029 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.730308056 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.730319977 CEST	49904	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.730325937 CEST	443	49904	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.733633995 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.733664989 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.733746052 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.733875036 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.733890057 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.821069002 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.821152925 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.821254969 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.821485996 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.821508884 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.821526051 CEST	49905	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.821532965 CEST	443	49905	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.825397015 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.825431108 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.825572014 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.825848103 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.825861931 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.845985889 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.846235991 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.846298933 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.846329927 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.846363068 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.846411943 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.846440077 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.846451044 CEST	49906	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.846457005 CEST	443	49906	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.849812031 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.849873066 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.850020885 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.850212097 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.850229979 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.893748045 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.894629955 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.894660950 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:52.895176888 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:52.895183086 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.027427912 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.028237104 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.028271914 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.028724909 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.028729916 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.036762953 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.037595987 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.037631989 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.038111925 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.038117886 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.129816055 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.130495071 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.130517960 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.130608082 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.130951881 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.130971909 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.130976915 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.131031036 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.131031036 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.131073952 CEST	49907	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.131093025 CEST	443	49907	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.134857893 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.134902954 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.135018110 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.135169029 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.135185957 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.155433893 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.155946970 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.155970097 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.156532049 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.156543970 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.232086897 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.232119083 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.232181072 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.232212067 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.232269049 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.232573986 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.232589960 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.232609987 CEST	49908	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.232615948 CEST	443	49908	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.236784935 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.236824989 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.236924887 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.237072945 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.237082005 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.250410080 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.250952005 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.251027107 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.251055956 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.251072884 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.251084089 CEST	49909	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.251091003 CEST	443	49909	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.254143953 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.254200935 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.254319906 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.254451036 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.254462004 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.344472885 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.344505072 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.344562054 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.344638109 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.344638109 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.345032930 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.345032930 CEST	49910	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.345052958 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.345062971 CEST	443	49910	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.348534107 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.348571062 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.348884106 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.348884106 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.348932981 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351375103 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351401091 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351509094 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.351536036 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351617098 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351686001 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.351716042 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.351716042 CEST	49911	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.351732969 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.351741076 CEST	443	49911	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.354237080 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.354265928 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.354348898 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.354468107 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.354482889 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.433157921 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.433984041 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.434022903 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.434521914 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.434528112 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.533812046 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.534580946 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.534611940 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.535131931 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.535137892 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.547609091 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.548372030 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.548402071 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.548876047 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.548891068 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.625467062 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.625866890 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.625920057 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.625956059 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.626015902 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.626065016 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.626080036 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.626131058 CEST	49912	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.626136065 CEST	443	49912	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.629468918 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.629509926 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.629595041 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.629786968 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.629802942 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.639657021 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.640153885 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.640171051 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.640642881 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.640651941 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.648839951 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.649266005 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.649288893 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.649718046 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.649727106 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.748868942 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.749072075 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.749135017 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.749169111 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.749205112 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.749500036 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.749515057 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.749531031 CEST	49914	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.749536037 CEST	443	49914	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.751076937 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.751146078 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.751228094 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.751399994 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.751415014 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.751429081 CEST	49913	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.751434088 CEST	443	49913	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.753581047 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.753606081 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.753704071 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.753880024 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.753890991 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.754131079 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.754163980 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.754220009 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.754302979 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.754312038 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.840461016 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.840635061 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.840745926 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.840939045 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.840950012 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.840959072 CEST	49915	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.840965033 CEST	443	49915	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844203949 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844496965 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844566107 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844573975 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844623089 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844631910 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844659090 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844670057 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844675064 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844716072 CEST	49916	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844719887 CEST	443	49916	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.844746113 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844907999 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.844918013 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.847134113 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.847167015 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.847235918 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.847354889 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.847367048 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.930860043 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.931721926 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.931759119 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:53.932260990 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:53.932267904 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.057775974 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.058832884 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.058871984 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.059294939 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.059309006 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.064369917 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.065021992 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.065048933 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.065541029 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.065546989 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.128403902 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.128485918 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.128551006 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.128837109 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.128858089 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.128875971 CEST	49917	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.128881931 CEST	443	49917	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.132910967 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.132956028 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.133035898 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.133228064 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.133238077 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.151160002 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.151731014 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.151752949 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.152270079 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.152280092 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.255196095 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.255506039 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.255563021 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.255585909 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.255631924 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.255691051 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.255709887 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.255722046 CEST	49918	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.255728960 CEST	443	49918	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.258987904 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.259023905 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.259114981 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.259258032 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.259268999 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.263955116 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.264319897 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.264390945 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.264451981 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.264466047 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.264475107 CEST	49919	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.264480114 CEST	443	49919	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.267362118 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.267374992 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.267468929 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.267622948 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.267631054 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.353488922 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.353988886 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.354077101 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.354115963 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.354127884 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.354136944 CEST	49921	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.354141951 CEST	443	49921	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.357676029 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.357718945 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.357834101 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.358045101 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.358061075 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.433588028 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.434393883 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.434442997 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.435086966 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.435096025 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.564980984 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.565740108 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.565766096 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.566293955 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.566302061 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.594469070 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.595108986 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.595139980 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.595622063 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.595627069 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.641139984 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.641799927 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.641834974 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.642365932 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.642369986 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.643791914 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.643867970 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.643935919 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.644145012 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.644170046 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.644186020 CEST	49922	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.644192934 CEST	443	49922	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.647466898 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.647512913 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.647609949 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.647764921 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.647788048 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.655179977 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.655618906 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.655633926 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.656089067 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.656092882 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.756506920 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.756855011 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.756928921 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.756970882 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.756988049 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.756999969 CEST	49924	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.757005930 CEST	443	49924	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.760334969 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.760381937 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.760483980 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.760634899 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.760657072 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.789217949 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.789865971 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.789913893 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.789926052 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.789940119 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.790003061 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.790019989 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.790030956 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.790045977 CEST	49923	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.790051937 CEST	443	49923	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.793910980 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.793960094 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.794071913 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.794229031 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.794244051 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.846905947 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.846998930 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.847058058 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.847073078 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.847112894 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.847383976 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.847408056 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.847424984 CEST	49920	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.847430944 CEST	443	49920	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.848247051 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.848440886 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.848507881 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.848582983 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.848598957 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.848611116 CEST	49925	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.848617077 CEST	443	49925	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.851103067 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851145029 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.851165056 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851201057 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.851229906 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851320028 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851404905 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851418018 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.851473093 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.851485968 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.951276064 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.952011108 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.952049971 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:54.952565908 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:54.952572107 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.079291105 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.080059052 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.080079079 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.080579042 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.080585003 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.096483946 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.097109079 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.097134113 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.097690105 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.097693920 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.150954962 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.151607037 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.151638985 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.152110100 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.152116060 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156291962 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156331062 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156373024 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156419039 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.156435013 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156450987 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156502962 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.156582117 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.156600952 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156610012 CEST	49926	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.156615973 CEST	443	49926	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.156769991 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.156795025 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.157335997 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.157341003 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.159871101 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.159929037 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.160016060 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.160165071 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.160180092 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.266395092 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.266702890 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.266796112 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.266818047 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.266834974 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.266846895 CEST	49927	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.266853094 CEST	443	49927	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.270661116 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.270700932 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.270806074 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.270997047 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.271009922 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.304960966 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.305171013 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.305224895 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.305252075 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.305413008 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.305459023 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.305474997 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.305490017 CEST	49928	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.305495024 CEST	443	49928	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.309154034 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.309195042 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.309293985 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.309437037 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.309453964 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.343960047 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.344033957 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.344111919 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.344446898 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.344458103 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.344468117 CEST	49930	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.344472885 CEST	443	49930	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.347794056 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.347807884 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.347909927 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.348043919 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.348056078 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.353959084 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.354259014 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.354470968 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.354676008 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.354686022 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.354702950 CEST	49929	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.354707003 CEST	443	49929	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.357808113 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.357847929 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.357920885 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.358093977 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.358112097 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.447946072 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.448719025 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.448748112 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.449266911 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.449271917 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.602647066 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.603316069 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.603362083 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.603843927 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.603849888 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.620974064 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.621633053 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.621675968 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.622100115 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.622106075 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.642771959 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.642807961 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.642855883 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.642887115 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.642930984 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.643142939 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.643157959 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.643171072 CEST	49931	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.643176079 CEST	443	49931	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.643217087 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.643651962 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.643673897 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.644083023 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.644088030 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.646368027 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.646404982 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.646502972 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.646641970 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.646656990 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.793766022 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.793971062 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.794054985 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.794225931 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.794243097 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.794255018 CEST	49933	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.794260025 CEST	443	49933	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.798006058 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.798048973 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.798152924 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.798362970 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.798374891 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.801455975 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.801999092 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.802041054 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.802596092 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.802608967 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.812942028 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.813105106 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.813189030 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.813466072 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.813483000 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.813497066 CEST	49932	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.813510895 CEST	443	49932	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.817398071 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.817426920 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.817538977 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.817727089 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.817739010 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.835541964 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.835587978 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.835654974 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.835664034 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.835714102 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.835963964 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.835975885 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.835990906 CEST	49934	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.835995913 CEST	443	49934	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.840101004 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.840127945 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.840214968 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.840354919 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.840367079 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.937958956 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.938602924 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.938632965 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:55.939099073 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:55.939109087 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.099488974 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.100281000 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.100302935 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.100805044 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.100815058 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.133119106 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.133193016 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.133261919 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.133529902 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.133548975 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.133559942 CEST	49935	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.133563995 CEST	443	49935	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.135036945 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.135564089 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.135595083 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.136059046 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.136066914 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.137763023 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.137804985 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.137901068 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.138022900 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.138034105 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.153572083 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.153605938 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.153662920 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.153671026 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.153712988 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.153978109 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.153999090 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.154007912 CEST	49936	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.154014111 CEST	443	49936	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.158488035 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.158530951 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.158622026 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.158817053 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.158833981 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.185214043 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.185806990 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.185822964 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.186512947 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.186517954 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.295854092 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.296318054 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.296402931 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.296427011 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.296444893 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.296457052 CEST	49937	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.296464920 CEST	443	49937	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.299943924 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.299972057 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.300055027 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.300237894 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.300250053 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.332398891 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.332870007 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.332972050 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.333000898 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.333000898 CEST	49939	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.333010912 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.333019018 CEST	443	49939	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.335993052 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.336028099 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.336126089 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.336272001 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.336281061 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.380060911 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.380199909 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.380314112 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.380584955 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.380597115 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.380609035 CEST	49938	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.380615950 CEST	443	49938	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.384109974 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.384170055 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.384273052 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.384494066 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.384510040 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.458122969 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.458749056 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.458779097 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.459373951 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.459382057 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.520204067 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.520988941 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.521009922 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.521493912 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.521498919 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.600862980 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.601577997 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.601600885 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.602086067 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.602091074 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.630816936 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.631484032 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.631505966 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.632005930 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.632010937 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.652781963 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.653559923 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.653634071 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.653662920 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.653676987 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.653692961 CEST	49941	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.653697968 CEST	443	49941	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.657160044 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.657201052 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.657315969 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.657480001 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.657491922 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.684448004 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.685062885 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.685082912 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.685767889 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.685775042 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.715640068 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.716017962 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.716089964 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.716118097 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.716207981 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.716259956 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.716280937 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.716295958 CEST	49940	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.716304064 CEST	443	49940	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.719664097 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.719712973 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.719810009 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.720005989 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.720022917 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.797678947 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.797714949 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.797772884 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.797911882 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.797913074 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.798228979 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.798228979 CEST	49942	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.798245907 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.798263073 CEST	443	49942	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.801891088 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.801923990 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.802012920 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.802227974 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.802241087 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.835489035 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.835632086 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.835721016 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.835942030 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.835963011 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.835974932 CEST	49943	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.835982084 CEST	443	49943	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.839612007 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.839653015 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.839737892 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.839986086 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.840001106 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.886846066 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.886883974 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.886945009 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.886993885 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.887048006 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.887341022 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.887361050 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.887372017 CEST	49944	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.887377024 CEST	443	49944	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.890789986 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.890822887 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.890902042 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.891087055 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.891100883 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.955287933 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.956111908 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.956142902 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:56.956672907 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:56.956677914 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.100611925 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.101289034 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.101314068 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.101799011 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.101803064 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.120804071 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.121408939 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.121443033 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.121896029 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.121902943 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.139236927 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.139919043 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.139941931 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.140429020 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.140434027 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.152247906 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.152615070 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.152688026 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.152736902 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.152751923 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.152761936 CEST	49945	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.152769089 CEST	443	49945	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.158608913 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.158631086 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.158723116 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.158893108 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.158905029 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.189104080 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.189639091 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.189666986 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.190143108 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.190150023 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.298921108 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.299237967 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.299315929 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.299428940 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.299428940 CEST	49947	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.299443960 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.299452066 CEST	443	49947	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.302897930 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.302926064 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.303004980 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.303216934 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.303231001 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.338041067 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.338361025 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.338404894 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.338416100 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.338463068 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.338504076 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.338520050 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.338532925 CEST	49948	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.338537931 CEST	443	49948	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.342267990 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.342303038 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.342386961 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.342581987 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.342602015 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.346196890 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.346291065 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.346347094 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.346535921 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.346545935 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.346556902 CEST	49946	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.346561909 CEST	443	49946	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.349514008 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.349545956 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.349633932 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.349788904 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.349805117 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.385113001 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.385200024 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.385260105 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.385545015 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.385550022 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.385581017 CEST	49949	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.385584116 CEST	443	49949	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.389303923 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.389338017 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.389414072 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.389612913 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.389627934 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.611562967 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.612210989 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.612246037 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.612915993 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.612926960 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.646441936 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.647134066 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.647150040 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.647665977 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.647670984 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.657031059 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.657622099 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.657639027 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.658129930 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.658134937 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.694328070 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.694859028 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.694895983 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.695431948 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.695439100 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.837975979 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.838306904 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.838387012 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.838458061 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.838474035 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.838486910 CEST	49952	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.838493109 CEST	443	49952	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.842407942 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.842432976 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.842521906 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.842700958 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.842710972 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.895376921 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.895659924 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.895742893 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.895932913 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.895951986 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.895966053 CEST	49954	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.895972013 CEST	443	49954	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.899627924 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.899646044 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.899738073 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.900217056 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.900228024 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.902060032 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.902141094 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.902203083 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.902297974 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.902313948 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.902329922 CEST	49950	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.902333975 CEST	443	49950	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.905065060 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.905102968 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:57.905174017 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.905328035 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:57.905340910 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.047878981 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.048357964 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.048552990 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.048552990 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.048552990 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.051577091 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.051609993 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.051704884 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.051908970 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.051920891 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.075515032 CEST	49705	80	192.168.2.17	142.250.80.99
Apr 2, 2025 16:42:58.075597048 CEST	49707	80	192.168.2.17	199.232.214.172
Apr 2, 2025 16:42:58.146321058 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.147027969 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.147047997 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.147567987 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.147573948 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.171593904 CEST	80	49707	199.232.214.172	192.168.2.17
Apr 2, 2025 16:42:58.171613932 CEST	80	49707	199.232.214.172	192.168.2.17
Apr 2, 2025 16:42:58.171670914 CEST	49707	80	192.168.2.17	199.232.214.172
Apr 2, 2025 16:42:58.172967911 CEST	80	49705	142.250.80.99	192.168.2.17
Apr 2, 2025 16:42:58.173019886 CEST	49705	80	192.168.2.17	142.250.80.99
Apr 2, 2025 16:42:58.203644991 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.204288960 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.204318047 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.204804897 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.204813004 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.206968069 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.207411051 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.207442045 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.207973003 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.207986116 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.340904951 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.341545105 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.341626883 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.341691017 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.341707945 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.341722012 CEST	49955	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.341727018 CEST	443	49955	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.345351934 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.345396996 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.345487118 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.345674992 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.345690966 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.349095106 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.349558115 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.349576950 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.350080967 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.350085974 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.363357067 CEST	49953	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.363368034 CEST	443	49953	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.404099941 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.404263020 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.404318094 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.404342890 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.404406071 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.404586077 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.404598951 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.404611111 CEST	49956	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.404613972 CEST	443	49956	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.407953024 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.408171892 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408204079 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.408299923 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408351898 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.408418894 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408451080 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408464909 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.408485889 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408490896 CEST	49957	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.408495903 CEST	443	49957	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.408504009 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.411166906 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.411211967 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.411310911 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.411453962 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.411468029 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.551079988 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.551337004 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.551389933 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.551389933 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.551443100 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.551508904 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.551522970 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.551534891 CEST	49958	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.551539898 CEST	443	49958	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.554903030 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.554941893 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.555030107 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.555181980 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.555191994 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.709306002 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.712701082 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.712719917 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.712744951 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.713267088 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.713272095 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.713346004 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.713381052 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.713913918 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.713920116 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.725281000 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.725733995 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.725758076 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.726133108 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.726138115 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.859539032 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.860182047 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.860202074 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.860698938 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.860702991 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.908135891 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.908166885 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.908224106 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.908268929 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.908423901 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.908824921 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.908844948 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.908870935 CEST	49960	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.908889055 CEST	443	49960	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.909032106 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.909379005 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.909442902 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.909521103 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.909538031 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.909553051 CEST	49959	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.909559011 CEST	443	49959	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.913017988 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913017988 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913068056 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.913105965 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.913206100 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913206100 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913379908 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913400888 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.913415909 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.913424015 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.921317101 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.921758890 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.921828985 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.921866894 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.921883106 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.921895981 CEST	49961	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.921901941 CEST	443	49961	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.925179958 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.925218105 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:58.925306082 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.925499916 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:58.925510883 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.015098095 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.015868902 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.015897036 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.016381979 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.016390085 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.082319975 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.082967997 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.083040953 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.083091974 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.083110094 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.083121061 CEST	49962	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.083127022 CEST	443	49962	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.086461067 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.086508989 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.086607933 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.086761951 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.086775064 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.209548950 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.210082054 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.210160017 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.210201979 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.210202932 CEST	49951	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.210218906 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.210231066 CEST	443	49951	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.211740017 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.212260962 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.212289095 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.212723970 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.212729931 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.214076996 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.214082003 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.214112997 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.214189053 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.214334965 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.214344978 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.214500904 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.214529991 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.214932919 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.214937925 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.230572939 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.231008053 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.231024981 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.231545925 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.231551886 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.397404909 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.398241043 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.398261070 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.398875952 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.398880959 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.414001942 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.414078951 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.414169073 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.414453983 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.414474010 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.414493084 CEST	49963	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.414499044 CEST	443	49963	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.418114901 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.418154001 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.418229103 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.418396950 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.418407917 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.450253963 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.450400114 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.450464010 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.450489998 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.450527906 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.450716972 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.450736046 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.450747013 CEST	49964	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.450753927 CEST	443	49964	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.454180956 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.454210997 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.454314947 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.454508066 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.454518080 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.464019060 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.464633942 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.464704037 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.464804888 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.464817047 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.464833975 CEST	49965	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.464839935 CEST	443	49965	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.467771053 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.467802048 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.467885017 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.468028069 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.468039036 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.519942999 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.520807028 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.520828009 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.521327019 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.521332026 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.592506886 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.592592001 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.592665911 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.592950106 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.592968941 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.592979908 CEST	49966	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.592986107 CEST	443	49966	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.596695900 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.596731901 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.596822977 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.597007990 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.597021103 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.714545012 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.714575052 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.714696884 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.714704037 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.714818001 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.714988947 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.715007067 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.715018034 CEST	49967	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.715023994 CEST	443	49967	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.717386007 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.717897892 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.717936993 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.718427896 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.718437910 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.718539953 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.718580008 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.718801022 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.718801022 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.718833923 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.755371094 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.756206989 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.756237030 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.756750107 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.756761074 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.766624928 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.767369032 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.767385960 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.767847061 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.767851114 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.900547028 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.901287079 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.901321888 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.901782036 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.901788950 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.927105904 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.927171946 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.927252054 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.927510977 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.927527905 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.927539110 CEST	49968	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.927545071 CEST	443	49968	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.931041002 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.931061029 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.931148052 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.931328058 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.931337118 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.951472044 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.951741934 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.951826096 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.951875925 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.951893091 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.951903105 CEST	49969	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.951909065 CEST	443	49969	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.955044031 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.955076933 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.955164909 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.955318928 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.955336094 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.965075016 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.965152025 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.965205908 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.965389967 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.965396881 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.965408087 CEST	49970	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.965411901 CEST	443	49970	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.968218088 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.968250990 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:42:59.968358040 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.968450069 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:42:59.968470097 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.031738043 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.032485962 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.032510996 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.033276081 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.033281088 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.198293924 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.198379040 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.198430061 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.198708057 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.198708057 CEST	49971	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.198721886 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.198725939 CEST	443	49971	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.202372074 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.202420950 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.202518940 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.202692986 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.202707052 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.230478048 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.231055021 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.231129885 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.231148005 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.231148005 CEST	49972	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.231153965 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.231162071 CEST	443	49972	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.234266996 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.234725952 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.234740019 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.235208988 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.235214949 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.258121014 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.258542061 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.258580923 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.258961916 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.258968115 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.266590118 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.267002106 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.267019987 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.267469883 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.267474890 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.430147886 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.430257082 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.430294991 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.430331945 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.430366039 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.430634022 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.430638075 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.430670023 CEST	49974	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.430674076 CEST	443	49974	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.451695919 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.452040911 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.452127934 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.452159882 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.452159882 CEST	49975	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.452173948 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.452183962 CEST	443	49975	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.457321882 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.457542896 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.457653999 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.457653999 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.457686901 CEST	49976	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.457703114 CEST	443	49976	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.497461081 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.498239040 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.498261929 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.498841047 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.498845100 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.723903894 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.724003077 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.724066019 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.724351883 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.724371910 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:00.724381924 CEST	49977	443	192.168.2.17	13.107.246.40
Apr 2, 2025 16:43:00.724390030 CEST	443	49977	13.107.246.40	192.168.2.17
Apr 2, 2025 16:43:17.621845961 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:17.621884108 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:17.621989012 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:17.622178078 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:17.622189045 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:17.829607964 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:17.830224991 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:17.830255032 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:27.887892962 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:27.887969017 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:43:27.888046980 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:29.082984924 CEST	49981	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:43:29.083023071 CEST	443	49981	142.251.40.196	192.168.2.17
Apr 2, 2025 16:44:17.676700115 CEST	49987	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:44:17.676825047 CEST	443	49987	142.251.40.196	192.168.2.17
Apr 2, 2025 16:44:17.676934004 CEST	49987	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:44:17.677165031 CEST	49987	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:44:17.677196980 CEST	443	49987	142.251.40.196	192.168.2.17
Apr 2, 2025 16:44:17.886209011 CEST	443	49987	142.251.40.196	192.168.2.17
Apr 2, 2025 16:44:17.886634111 CEST	49987	443	192.168.2.17	142.251.40.196
Apr 2, 2025 16:44:17.886667967 CEST	443	49987	142.251.40.196	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 16:42:12.962878942 CEST	53	52074	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.001810074 CEST	53	56155	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.755059958 CEST	53	49643	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.881318092 CEST	49963	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:13.881462097 CEST	54651	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:13.886362076 CEST	53860	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:13.886522055 CEST	51073	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:13.987394094 CEST	53	54651	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.988095045 CEST	53	49963	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.988962889 CEST	62641	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:13.991080046 CEST	53	53860	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:13.992429018 CEST	53	51073	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:14.098054886 CEST	53	62641	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:14.121563911 CEST	63320	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:14.122064114 CEST	61375	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:14.228305101 CEST	53	61375	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:14.231702089 CEST	53	63320	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:14.299787045 CEST	54101	53	192.168.2.17	8.8.8.8
Apr 2, 2025 16:42:14.300369024 CEST	53338	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:14.402847052 CEST	53	54101	8.8.8.8	192.168.2.17
Apr 2, 2025 16:42:14.404747009 CEST	53	53338	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:15.308937073 CEST	50293	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:15.309087992 CEST	58801	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:15.415837049 CEST	53	50293	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:15.417370081 CEST	53	58801	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:17.563491106 CEST	63821	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:17.563626051 CEST	50164	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:17.667417049 CEST	53	63821	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:17.667690039 CEST	53	50164	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:20.442749023 CEST	54920	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:20.443061113 CEST	55304	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:20.549509048 CEST	53	54920	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:20.550442934 CEST	53	55304	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:20.551213026 CEST	57063	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:20.661863089 CEST	53	57063	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:30.794220924 CEST	53	50071	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:49.495851040 CEST	53	52230	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:50.689639091 CEST	56422	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:50.689800024 CEST	61753	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:50.795732975 CEST	53	61753	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:50.800992012 CEST	53	56422	1.1.1.1	192.168.2.17
Apr 2, 2025 16:42:50.801947117 CEST	55558	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:42:50.911556005 CEST	53	55558	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:04.479163885 CEST	57861	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:43:04.587826967 CEST	53	57861	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:12.390425920 CEST	53	54274	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:12.893277884 CEST	53	49650	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:16.321679115 CEST	53	49491	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:25.677881002 CEST	52914	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:43:25.789393902 CEST	53	52914	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:30.654858112 CEST	138	138	192.168.2.17	192.168.2.255
Apr 2, 2025 16:43:42.812788010 CEST	53	50225	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:50.937139988 CEST	59461	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:43:50.937414885 CEST	59232	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:43:51.042073965 CEST	53	59461	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:51.045368910 CEST	53	59232	1.1.1.1	192.168.2.17
Apr 2, 2025 16:43:51.046276093 CEST	62663	53	192.168.2.17	1.1.1.1
Apr 2, 2025 16:43:51.151945114 CEST	53	62663	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 2, 2025 16:42:13.881318092 CEST	192.168.2.17	1.1.1.1	0xe109	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:13.881462097 CEST	192.168.2.17	1.1.1.1	0x1347	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:13.886362076 CEST	192.168.2.17	1.1.1.1	0xfca6	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:13.886522055 CEST	192.168.2.17	1.1.1.1	0x42b3	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:13.988962889 CEST	192.168.2.17	1.1.1.1	0xb1b5	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.121563911 CEST	192.168.2.17	1.1.1.1	0xc914	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.122064114 CEST	192.168.2.17	1.1.1.1	0xceb	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:14.299787045 CEST	192.168.2.17	8.8.8.8	0x76dc	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.300369024 CEST	192.168.2.17	1.1.1.1	0xd956	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:15.308937073 CEST	192.168.2.17	1.1.1.1	0x1cd7	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:15.309087992 CEST	192.168.2.17	1.1.1.1	0x7d3d	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:17.563491106 CEST	192.168.2.17	1.1.1.1	0x289	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:17.563626051 CEST	192.168.2.17	1.1.1.1	0x635b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 2, 2025 16:42:20.442749023 CEST	192.168.2.17	1.1.1.1	0xdb23	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:20.443061113 CEST	192.168.2.17	1.1.1.1	0x2e12	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:20.551213026 CEST	192.168.2.17	1.1.1.1	0x4162	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:50.689639091 CEST	192.168.2.17	1.1.1.1	0xa76a	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:50.689800024 CEST	192.168.2.17	1.1.1.1	0x92dd	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:42:50.801947117 CEST	192.168.2.17	1.1.1.1	0xfe25	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:04.479163885 CEST	192.168.2.17	1.1.1.1	0xdec7	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:25.677881002 CEST	192.168.2.17	1.1.1.1	0xa501	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:50.937139988 CEST	192.168.2.17	1.1.1.1	0x34de	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:50.937414885 CEST	192.168.2.17	1.1.1.1	0x6c7a	Standard query (0)	franoapas.co.in	65	IN (0x0001)	false
Apr 2, 2025 16:43:51.046276093 CEST	192.168.2.17	1.1.1.1	0x310e	Standard query (0)	franoapas.co.in	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 2, 2025 16:42:13.987394094 CEST	1.1.1.1	192.168.2.17	0x1347	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:13.988095045 CEST	1.1.1.1	192.168.2.17	0xe109	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:13.991080046 CEST	1.1.1.1	192.168.2.17	0xfca6	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:13.992429018 CEST	1.1.1.1	192.168.2.17	0x42b3	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:14.098054886 CEST	1.1.1.1	192.168.2.17	0xb1b5	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.228305101 CEST	1.1.1.1	192.168.2.17	0xceb	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:14.231702089 CEST	1.1.1.1	192.168.2.17	0xc914	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.402847052 CEST	8.8.8.8	192.168.2.17	0x76dc	No error (0)	google.com		142.250.64.78	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:14.404747009 CEST	1.1.1.1	192.168.2.17	0xd956	No error (0)	google.com		142.250.80.46	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:15.415837049 CEST	1.1.1.1	192.168.2.17	0x1cd7	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:15.417370081 CEST	1.1.1.1	192.168.2.17	0x7d3d	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:17.667417049 CEST	1.1.1.1	192.168.2.17	0x289	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:17.667690039 CEST	1.1.1.1	192.168.2.17	0x635b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 2, 2025 16:42:20.549509048 CEST	1.1.1.1	192.168.2.17	0xdb23	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:20.550442934 CEST	1.1.1.1	192.168.2.17	0x2e12	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:20.661863089 CEST	1.1.1.1	192.168.2.17	0x4162	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:50.795732975 CEST	1.1.1.1	192.168.2.17	0x92dd	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:42:50.800992012 CEST	1.1.1.1	192.168.2.17	0xa76a	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:42:50.911556005 CEST	1.1.1.1	192.168.2.17	0xfe25	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:04.587826967 CEST	1.1.1.1	192.168.2.17	0xdec7	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:25.789393902 CEST	1.1.1.1	192.168.2.17	0xa501	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:51.042073965 CEST	1.1.1.1	192.168.2.17	0x34de	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false
Apr 2, 2025 16:43:51.045368910 CEST	1.1.1.1	192.168.2.17	0x6c7a	Name error (3)	franoapas.co.in	none	none	65	IN (0x0001)	false
Apr 2, 2025 16:43:51.151945114 CEST	1.1.1.1	192.168.2.17	0x310e	Name error (3)	franoapas.co.in	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.svc.static.microsoft

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.17	49728	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:32 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:32 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:32 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 01 Apr 2025 23:06:39 GMT ETag: "0x8DD7171DC6A9E79" x-ms-request-id: 86ebbf9d-801e-00a3-5f95-a37cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144232Z-17cccd5449bzw64jhC1EWRz23400000015w000000000hgsa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:32 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2025-04-02 14:42:32 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.17	49732	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 29bfa1de-301e-0096-3799-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bsm7zrhC1EWR8efs0000000ktg00000000a570 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.17	49731	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: e9e264f8-a01e-0021-2aa1-a3814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bj2jgkhC1EWRr8fn00000006f000000000312v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:33 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.17	49730	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:33 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 29a78659-e01e-00aa-7299-a3ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449b6sxz8hC1EWRrtxw000000161g0000000019q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:33 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.17	49729	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: d5f8a99e-b01e-001e-0999-a30214000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bq6f54hC1EWRb85w00000015z0000000008xzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.17	49733	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 477a96fb-b01e-0070-6999-a31cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bj2jgkhC1EWRr8fn00000006ag00000000gknf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.17	49734	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: acc6ec1c-001e-002b-3999-a399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bn9hh6hC1EWRzvfg00000015vg00000000nfac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.17	49736	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 557ef69d-801e-002a-6399-a331dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bh49mhhC1EWRu74000000015y000000000c655 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.17	49735	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c3e0ec5a-f01e-0052-5b99-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bvftlphC1EWRsrrs000000160g0000000046y2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.17	49737	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f09da672-401e-0035-4b99-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449b89qrjhC1EWR229800000015y000000000c41x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.17	49738	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:33 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 69bb7527-f01e-001f-2b99-a35dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144233Z-17cccd5449bj2v8mhC1EWR5asn0000000gb000000000g09x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.17	49740	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 1b24004d-e01e-003c-7499-a3c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bq6f54hC1EWRb85w00000015v000000000n4km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.17	49741	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 13c018ae-a01e-0098-5580-a38556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449b89qrjhC1EWR229800000015xg00000000dn6c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.17	49742	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: c3e0eda0-f01e-0052-1599-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bgvc9thC1EWR7dt000000015y000000000ddvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.17	49739	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 97ccc31d-101e-00a2-5f99-a39f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449blr9xfhC1EWR6mgs00000015wg00000000f96u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.17	49743	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c5e94065-501e-0016-5599-a3181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449b6vb9jhC1EWRfnfg00000015v000000000nc9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.17	49745	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4642ad86-e01e-0052-4c96-a3d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bk9jrqhC1EWRqvg40000000860000000001rmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.17	49744	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 767932e4-c01e-0034-7599-a32af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bj2jgkhC1EWRr8fn00000006cg00000000abn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49746	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 57d8c7c7-901e-00a0-6c99-a36a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bn9hh6hC1EWRzvfg00000015ug00000000sv00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.17	49747	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 81ad4f7e-a01e-0084-6f99-a39ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449b4wvd9hC1EWRkczn00000015x000000000dfgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.17	49748	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:34 UTC	199	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8c141d3c-801e-00ac-1e99-a3fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144234Z-17cccd5449bpx5xthC1EWRqmf400000015xg00000000dzfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.17	49751	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 81ad5129-a01e-0084-1099-a39ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449bqvwqkhC1EWR1rfs0000001600000000005apw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.17	49749	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: eb380c01-001e-0079-3a99-a312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449bzw64jhC1EWRz23400000015yg00000000a7p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.17	49750	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9dd4ed14-001e-0028-0f99-a3c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449bkr6n6hC1EWRx10800000004hg00000000qsu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.17	49752	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 112e5c97-201e-003c-0699-a330f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449bpx5xthC1EWRqmf400000015v000000000p0w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:35 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.17	49755	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: ce599196-201e-0033-5f99-a3b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449b6vb9jhC1EWRfnfg00000015vg00000000kshh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.17	49754	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: b1a2e2a6-001e-00a2-4e99-a3d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449b4wvd9hC1EWRkczn00000015x000000000dfka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.17	49756	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 88e4fc3c-801e-0015-6699-a3f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144235Z-17cccd5449bj2v8mhC1EWR5asn0000000gbg00000000eurs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.17	49757	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:35 UTC	199	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: acf8d575-c01e-0049-7199-a3ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bn9hh6hC1EWRzvfg0000001600000000006f2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.17	49758	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: e0f73982-601e-0050-2d99-a32c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449b6sxz8hC1EWRrtxw00000015y000000000cbff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.17	49759	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ce5b7109-b01e-0053-0199-a3cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bh49mhhC1EWRu74000000015v000000000nsxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49760	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 74a7548e-001e-000b-5f99-a315a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449b4tm5chC1EWRr59800000015wg00000000fkpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.17	49761	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 29a78b8b-e01e-00aa-6999-a3ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bxd7kxhC1EWRapns00000015yg000000009b99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.17	49753	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 41af96b3-d01e-008e-4c99-a3387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bkr6n6hC1EWRx10800000004mg00000000h8pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.17	49762	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 557efcb8-801e-002a-7b99-a331dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449bj2jgkhC1EWRr8fn00000006c000000000c280 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.17	49764	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: abd626af-201e-006e-6999-a3bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bqnwr7hC1EWRa66000000015yg00000000aawf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.17	49765	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:36 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 5b939686-101e-0065-5999-a34088000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bj2v8mhC1EWR5asn0000000ge0000000007g45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.17	49766	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fd10d644-901e-008f-0299-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449bqvwqkhC1EWR1rfs00000016200000000008rr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.17	49763	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:36 UTC	199	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3b50fe07-b01e-0021-0899-a3cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144236Z-17cccd5449bkk7bshC1EWR4rww00000015ug00000000nr8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.17	49767	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: fd10d68c-901e-008f-4799-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449b4wvd9hC1EWRkczn00000015z0000000008a3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.17	49768	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f09dad20-401e-0035-4199-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449bhkn97hC1EWRp7ew00000015ug00000000nssp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.17	49769	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ab466b78-b01e-0001-3899-a346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449blprb2hC1EWRvwmn00000015vg00000000kp44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.17	49770	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 905bac2d-501e-0064-2d99-a31f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449bsm7zrhC1EWR8efs0000000kw0000000001wdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.17	49771	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: c0b85060-601e-000d-6b99-a32618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449b89qrjhC1EWR229800000015w000000000hyh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:37 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.17	49772	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fcc1ad53-701e-003e-5699-a379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144237Z-17cccd5449b4tm5chC1EWRr59800000015y000000000b77z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.17	49773	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9ee9526e-701e-0001-6099-a3b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449blprb2hC1EWRvwmn00000016200000000006q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.17	49775	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: fb7babe9-801e-007b-2699-a3e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449blr9xfhC1EWR6mgs00000015wg00000000f9mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.17	49774	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:37 UTC	199	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d308e746-f01e-003c-3299-a38cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449b6sxz8hC1EWRrtxw00000015x000000000f2w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.17	49776	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c3e0f4d1-f01e-0052-6899-a39224000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449bvj9xqhC1EWRh59s0000001610000000002kr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.17	49777	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 34fb1ca9-101e-005a-2599-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449b6vb9jhC1EWRfnfg00000015xg00000000d7wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.17	49778	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 97f4badc-401e-0029-7699-a39b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449bqnwr7hC1EWRa66000000015vg00000000m4ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.17	49780	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 34fb1d0e-101e-005a-7f99-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449b6vb9jhC1EWRfnfg00000016000000000058n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.17	49779	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: ebdbb4e0-601e-0032-5f99-a3eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449bj2v8mhC1EWR5asn0000000gb000000000g0v1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.17	49781	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f09db0cc-401e-0035-4899-a382d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144238Z-17cccd5449bj2v8mhC1EWR5asn0000000gag00000000kcex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.17	49782	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: b1a2ec3d-001e-00a2-6a99-a3d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bvj9xqhC1EWRh59s00000015yg000000009vb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.17	49783	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 57ecc4bc-201e-0071-6399-a3ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bn9hh6hC1EWRzvfg00000015wg00000000hu1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.17	49784	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 7f5c7f06-801e-0067-5399-a3fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bpx5xthC1EWRqmf4000000161g0000000018nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.17	49785	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:38 UTC	199	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c103343e-201e-0003-5599-a3f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bvftlphC1EWRsrrs00000015x000000000ecxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.17	49786	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b88ccda1-101e-0079-7e99-a35913000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449b4wvd9hC1EWRkczn000000160g000000003yf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.17	49787	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 905bb141-501e-0064-0d99-a31f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bj2v8mhC1EWR5asn0000000gg0000000001ec5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.17	49788	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fb7bad82-801e-007b-1b99-a3e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bxd7kxhC1EWRapns00000015yg000000009bma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.17	49790	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: fd10dbb2-901e-008f-2f99-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449b6vb9jhC1EWRfnfg00000015ug00000000pp13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.17	49791	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 97f4bde0-401e-0029-5a99-a39b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bkk7bshC1EWR4rww00000015u000000000qghy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.17	49789	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 95d5627c-a01e-0050-5fa1-a3db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bzw64jhC1EWRz23400000015y000000000bq2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.17	49792	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 3198e3a8-001e-0046-0299-a3da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144239Z-17cccd5449bj2v8mhC1EWR5asn0000000gfg000000002tt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.17	49793	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:39 UTC	199	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 40a590ff-501e-005b-2499-a3d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bqnwr7hC1EWRa6600000001600000000005qd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.17	49794	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 454eafe0-e01e-0071-7e99-a308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449b6vb9jhC1EWRfnfg00000015x000000000f5t5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.17	49795	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: f532ab7d-a01e-003d-5899-a398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449b89qrjhC1EWR229800000015w000000000hysv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.17	49797	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: e0f74342-601e-0050-7399-a32c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449b4wvd9hC1EWRkczn00000015y000000000aqmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.17	49796	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 636ff77c-f01e-0099-6f99-a39171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bqnwr7hC1EWRa66000000015vg00000000m4gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.17	49798	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: b68f0305-b01e-003e-1f99-a38e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bk9jrqhC1EWRqvg4000000080000000000kvdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.17	49799	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 29bfb893-301e-0096-2599-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bq6f54hC1EWRb85w00000015v000000000n58g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.17	49800	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26eb126c-701e-0032-4599-a3a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144240Z-17cccd5449bpx5xthC1EWRqmf40000001610000000002msm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.17	49801	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:40 UTC	199	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c5e94fd8-501e-0016-2499-a3181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449b4wvd9hC1EWRkczn00000015vg00000000hsay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.17	49803	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	199	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4e075d5e-701e-0097-5199-a3b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bsm7zrhC1EWR8efs0000000kq000000000q7x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.17	49804	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	199	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 9ee95703-701e-0001-2599-a3b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bkr6n6hC1EWRx10800000004mg00000000h955 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.17	49805	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	200	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: fcc1b6f8-701e-003e-2199-a379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bfs6jfhC1EWR678800000015z00000000096br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.17	49806	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	199	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5b939c27-101e-0065-1899-a34088000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bh49mhhC1EWRu74000000015wg00000000ghav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.17	49802	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	199	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: d55ea7b7-401e-000a-1099-a34a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449b6sxz8hC1EWRrtxw0000001610000000002x32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.17	49807	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	200	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 57d8d880-901e-00a0-1d99-a36a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bzd7mthC1EWRrdxw000000160g0000000043hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.17	49809	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	200	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c618d5cc-c01e-0014-5f99-a3a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449bpx5xthC1EWRqmf400000015w000000000huzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.17	49808	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:41 UTC	199	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:41 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 34fb1f8c-101e-005a-5099-a3882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144241Z-17cccd5449b6sxz8hC1EWRrtxw000000161g000000001aqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:41 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.17	49810	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 4e075ee6-701e-0097-4699-a3b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bj2jgkhC1EWRr8fn00000006cg00000000acf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.17	49811	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f532ae23-a01e-003d-6c99-a398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bqnwr7hC1EWRa66000000015zg000000007q3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.17	49812	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: a7420e67-101e-0028-2d99-a38f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449blprb2hC1EWRvwmn00000015v000000000mhyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.17	49813	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 8c1437d0-801e-00ac-7b99-a3fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bj2v8mhC1EWR5asn0000000ga000000000mbk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.17	49814	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a80af5d7-901e-007b-0397-a3ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bkr6n6hC1EWRx10800000004m000000000kad3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.17	49815	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 29a798e6-e01e-00aa-1c99-a3ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bvftlphC1EWRsrrs0000001610000000002v1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.17	49816	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d865965a-b01e-003d-1f99-a3d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bh49mhhC1EWRu74000000016200000000000vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.17	49817	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: c0b85759-601e-000d-3e99-a32618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bsm7zrhC1EWR8efs0000000kp000000000rr21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.17	49818	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 3b510c49-b01e-0021-0799-a3cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bkk7bshC1EWR4rww00000015v000000000n2uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.17	49819	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:42 UTC	199	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:42 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 1693bea2-c01e-0066-4b99-a3a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144242Z-17cccd5449bvj9xqhC1EWRh59s00000015wg00000000ftb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:42 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.17	49821	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: c5e9542f-501e-0016-4b99-a3181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bxd7kxhC1EWRapns000000161g0000000014k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.17	49820	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c0b857a7-601e-000d-0a99-a32618000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bzw64jhC1EWRz23400000015zg00000000739b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.17	49822	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: b124c87c-301e-0000-2d95-a3eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bzd7mthC1EWRrdxw00000015x000000000e3bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.17	49823	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 922c805b-101e-0017-0795-a347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bj2jgkhC1EWRr8fn00000006d0000000008y9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.17	49824	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ed50c1ce-c01e-00ad-5895-a3a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449b6sxz8hC1EWRrtxw00000015v000000000pgv8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.17	49826	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 96717981-201e-000c-1495-a379c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bqnwr7hC1EWRa66000000015z0000000008k7m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.17	49825	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 1afdc6a3-e01e-003c-2a95-a3c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bj2v8mhC1EWR5asn0000000gb000000000g1cr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.17	49827	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 041a665c-601e-0084-7295-a36b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449bpx5xthC1EWRqmf400000015yg00000000aw10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.17	49829	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 1ca05b9d-601e-006f-4d95-a3e43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144243Z-17cccd5449b4tm5chC1EWRr598000000160g000000004dx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.17	49828	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:43 UTC	199	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bac3f932-401e-0083-6499-a3075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bn9hh6hC1EWRzvfg00000015yg00000000br8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.17	49830	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f525bc9e-a01e-003d-0695-a398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bvftlphC1EWRsrrs00000015y000000000bhhc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.17	49831	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 49fe158e-001e-008d-7a95-a3d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bgvc9thC1EWR7dt000000015xg00000000e6vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.17	49832	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 97e7cc7f-401e-0029-2595-a39b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bn9hh6hC1EWRzvfg00000015z0000000009unk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.17	49833	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: fb99b9f8-c01e-0079-0195-a3e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bxd7kxhC1EWRapns00000015zg000000006faa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.17	49834	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 39bbb7f6-e01e-0085-4195-a3c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bj2jgkhC1EWRr8fn00000006eg000000004c36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.17	49835	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 88d44004-801e-0015-5d95-a3f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bj2v8mhC1EWR5asn0000000ggg00000000042e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.17	49836	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 29afd740-301e-0096-0395-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449b6vb9jhC1EWRfnfg00000015w000000000hxbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.17	49837	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:44 UTC	199	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: ebcd9cf7-601e-0032-7a95-a3eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144244Z-17cccd5449bkk7bshC1EWR4rww00000015v000000000n34g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.17	49838	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9419e51d-a01e-000d-4195-a3d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449blr9xfhC1EWR6mgs00000016000000000054cq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.17	49839	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: d2fde56f-f01e-003c-4e95-a38cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449blr9xfhC1EWR6mgs00000015yg00000000a059 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.17	49840	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29afd77c-301e-0096-3c95-a3e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449bgvc9thC1EWR7dt00000001610000000003n86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.17	49841	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: efe4943c-a01e-00ab-0d95-a39106000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449bzd7mthC1EWRrdxw00000015zg000000007m2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.17	49842	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fd10e5e6-901e-008f-7199-a367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449b89qrjhC1EWR2298000000161g000000001emv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.17	49843	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: d54fa79b-401e-000a-7995-a34a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449bvftlphC1EWRsrrs00000015ug00000000r3zx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.17	49844	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d54fa79e-401e-000a-7c95-a34a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449bqnwr7hC1EWRa66000000015u000000000rh4b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.17	49845	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ed50c242-c01e-00ad-3e95-a3a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144245Z-17cccd5449bqvwqkhC1EWR1rfs00000015yg0000000090kt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.17	49846	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:45 UTC	199	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: a2b7209a-d01e-007a-2a95-a3f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449b4wvd9hC1EWRkczn000000162000000000017y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.17	49847	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 96717a06-201e-000c-1395-a379c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bzw64jhC1EWRz23400000016200000000000ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.17	49848	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 303ae2a3-201e-003f-2d99-a36d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bvftlphC1EWRsrrs00000015z0000000008vut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.17	49849	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 6696de82-301e-005d-0b95-a3e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bsm7zrhC1EWR8efs0000000kt000000000b96e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.17	49850	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 60c684b0-201e-0085-5899-a334e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bqnwr7hC1EWRa66000000015x000000000f6ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.17	49851	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 1ca05c35-601e-006f-5595-a3e43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bqvwqkhC1EWR1rfs00000015yg0000000090nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.17	49852	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c0ae60cf-001e-0065-1f95-a30b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449bh49mhhC1EWRu7400000001610000000002t09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.17	49853	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 7f8badf4-a01e-0070-0d95-a3573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bj2jgkhC1EWRr8fn000000068000000000s474 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.17	49855	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 419e376b-d01e-008e-4b95-a3387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144246Z-17cccd5449bqnwr7hC1EWRa66000000015u000000000rh72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.17	49856	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:46 UTC	199	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4328809d-501e-0029-3799-a3d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449blr9xfhC1EWR6mgs00000016000000000054gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.17	49857	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c208c510-e01e-0020-4e95-a3de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449b89qrjhC1EWR229800000015z0000000008qe4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.17	49858	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7f5c9662-801e-0067-4d99-a3fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449bq6f54hC1EWRb85w000000162000000000007z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.17	49859	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c60a940f-c01e-0014-3295-a3a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449bj2v8mhC1EWR5asn0000000gb000000000g1rq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.17	49860	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 40a5a3f1-501e-005b-6499-a3d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449b4wvd9hC1EWRkczn00000015xg00000000c0pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.17	49861	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4095ca39-501e-005b-1c95-a3d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449b89qrjhC1EWR229800000015vg00000000kz61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:47 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.17	49854	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:47 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53d4a86d-401e-0064-0195-a354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144247Z-17cccd5449bvj9xqhC1EWRh59s00000015z000000000894v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.17	49863	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 54922567-e01e-0033-7499-a34695000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bpx5xthC1EWRqmf400000016200000000000f1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.17	49862	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d54fa7bc-401e-000a-1895-a34a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449blr9xfhC1EWR6mgs00000015vg00000000kr59 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.17	49864	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:47 UTC	199	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 7ca7afbb-601e-0002-1a95-a3a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449blprb2hC1EWRvwmn00000015vg00000000kqbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.17	49865	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e0889f00-401e-0047-5595-a38597000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bgvc9thC1EWR7dt000000015yg00000000bk7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.17	49866	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: ebcd9d87-601e-0032-7695-a3eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449b4wvd9hC1EWRkczn000000160g000000003ze1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.17	49867	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 05122a82-f01e-0096-0b95-a310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bh49mhhC1EWRu74000000015vg00000000mh9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.17	49868	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 69adc8a8-f01e-001f-4c95-a35dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bh49mhhC1EWRu74000000015wg00000000gk6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.17	49869	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: c618e822-c01e-0014-1999-a3a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bvftlphC1EWRsrrs0000001610000000002vvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.17	49870	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: ce5b91e0-b01e-0053-2e99-a3cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bsm7zrhC1EWR8efs0000000kpg00000000qa0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.17	49871	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 39bbb8f7-e01e-0085-3195-a3c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144248Z-17cccd5449bq6f54hC1EWRb85w0000001610000000002pua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.17	49872	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 6696df0a-301e-005d-1095-a3e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449bq6f54hC1EWRb85w00000015y000000000cew1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.17	49873	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 06af814d-201e-0051-4095-a37340000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449bn9hh6hC1EWRzvfg000000160g000000004ysh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.17	49874	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:48 UTC	199	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: e0e93926-601e-0050-1e95-a32c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449bqvwqkhC1EWR1rfs00000015y000000000a72k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.17	49875	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:49 UTC	199	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: db8468d2-d01e-00a1-5695-a335b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449blprb2hC1EWRvwmn00000015w000000000gpxf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.17	49876	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:49 UTC	199	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: a0b1aae2-a01e-0002-1895-a35074000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449b6vb9jhC1EWRfnfg00000015vg00000000ktq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.17	49877	13.107.246.40	443

Timestamp	Bytes transferred	Direction	Data
2025-04-02 14:42:49 UTC	199	OUT	GET /rules/rule702900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-04-02 14:42:49 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 14:42:49 GMT Content-Type: text/xml Content-Length: 1374 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE539933F" x-ms-request-id: 322c0dfe-401e-0078-0b95-a34d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20250402T144249Z-17cccd5449b89qrjhC1EWR22980000001620000000000049 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-04-02 14:42:49 UTC	1374	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenManageability" S="Medium" />

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 380, Parent PID: 2400

Function Logs

General

Target ID:	0
Start time:	10:42:10
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3092, Parent PID: 380

Function Logs

General

Target ID:	1
Start time:	10:42:11
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,665249329600805583,15721968313520424199,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6188, Parent PID: 2400

Function Logs

General

Target ID:	2
Start time:	10:42:13
Start date:	02/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://franoapas.co.in"
Imagebase:	0x7ff643280000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://franoapas.co.in

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 380, Parent PID: 2400

General

File Activities

File Opened

File Created

File Deleted

File Moved

Other File Operations

Registry Activities

Key Deleted

Key Value Deleted

COM Activities

WMI Operations

Process Activities

Process Created

Process Terminated

Windows Analysis Report
http://franoapas.co.in