Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://logiamutusliber.com.ar/dan/gbsources

Overview

General Information

Sample URL:	http://logiamutusliber.com.ar/dan/gbsources
Analysis ID:	1527698
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Suricata IDS alerts with low severity for network traffic

Suspicious form URL found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 1216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2300,i,1858375456544592284,11987062658215177213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://logiamutusliber.com.ar/dan/gbsources" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Common Form POST - Possible Generic Phishing Landing 2020-06-11

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T08:58:08.065087+0200	2030302	2	Possible Social Engineering Attempted	198.27.76.221	80	192.168.2.4	49735	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://logiamutusliber.com.ar/dan/gbsources

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: http://logiamutusliber.com.ar/dan/gbsources/

LLM: Score: 9 Reasons: The brand 'Global Sources' is a known brand associated with the domain 'globalsources.com'., The provided URL 'logiamutusliber.com.ar' does not match the legitimate domain of Global Sources., The URL 'logiamutusliber.com.ar' does not contain any recognizable elements related to 'Global Sources'., The domain extension '.com.ar' is unusual for a global brand like Global Sources, which typically uses '.com'., The URL does not contain any subdomains or elements that suggest a legitimate association with Global Sources. DOM: 0.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: Number of links: 0

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: Title: Global Sources does not match URL

Source: http://logiamutusliber.com.ar/dan/gbsources/	HTTP Parser: Invalid link: Terms of Use
Source: http://logiamutusliber.com.ar/dan/gbsources/	HTTP Parser: Invalid link: Privacy Policy

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: Has password / email / username input fields

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: Form action: post.php

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: <input type="password" .../> found

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: No <meta name="author".. found

Source: http://logiamutusliber.com.ar/dan/gbsources/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49890 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2030302 - Severity 2 - ET PHISHING Common Form POST - Possible Generic Phishing Landing 2020-06-11 : 198.27.76.221:80 -> 192.168.2.4:49735

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/8.3.11content-type: text/htmlcontent-length: 1522content-encoding: gzipvary: Accept-Encodingdate: Mon, 07 Oct 2024 06:57:57 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 18 5d 6f db 36 f0 59 01 f2 1f 0e f4 b3 2d db a9 db c0 91 0c 6c 49 3a f4 69 01 da 75 d8 23 2d d1 16 17 49 d4 48 ca b1 3b ec 07 ed 6f ec 97 0d c7 0f 7d 38 72 9a 6e ed b6 02 b3 2c 89 22 ef 8e c7 e3 7d 32 ca 74 91 af a2 8c d1 74 15 15 4c 53 c8 b4 ae c6 ec 97 9a ef 62 72 2d 4a cd 4a 3d 7e 77 a8 18 81 c4 7e c5 44 b3 bd 0e 11 f1 0a 92 8c 4a c5 74 fc c0 cb 54 3c a8 f1 6c be 98 93 d5 f9 d9 f9 59 a4 b9 ce d9 ea bb 5c ac 69 0e 6f 45 2d 13 a6 a2 d0 f6 1a 00 a5 0f 39 5b 9d 9f d1 65 26 76 4c fe 9a 88 5c c8 e5 e8 f5 eb e9 74 3a bd 82 8d 28 f5 d8 c0 2c b9 a6 39 4f ae e0 b7 f3 b3 28 f4 68 e7 67 51 ce cb 7b 90 2c 8f 89 ca 84 d4 49 ad 81 27 a2 24 a0 0f 15 8b 09 2f e8 96 85 55 b9 25 90 49 b6 89 09 ae 4d 2d c3 90 4f 78 b1 ad e5 24 11 45 f8 e3 cd 4f 7c 5f bc 9c 20 98 65 3c 34 d2 40 16 ed 15 ad 45 7a 00 9c 2b 26 a3 c5 25 5e 04 28 7e fb af 98 10 d8 f5 01 0c a9 f3 b3 20 d2 74 9d 33 04 df 96 31 49 58 a9 99 b4 f3 04 91 46 c2 ab 48 cb 55 a4 53 c8 18 df 66 3a 26 64 15 85 3a c5 87 74 44 90 8d c0 81 99 ae 60 98 2c 3c f0 54 67 86 42 8f b4 c3 09 22 5e 6c 41 c9 64 58 10 df cb 52 a8 f9 6e f2 73 e5 04 11 04 2d 23 51 e8 28 86 66 3d 96 62 3b ec 45 d5 7f 7b 9e 3f b2 34 8f e4 c1 9b 55 9f 5a e6 7a 6b 54 05 a5 9e b0 3c 57 15 4d 78 b9 8d c9 14 05 1b 04 fe 3e 92 6f 83 35 ba bd b9 bd be bd 26 0d 5b 17 d3 be cc 5b 12 48 ca ef cf 63 7c 27 ee c5 e5 b4 a5 65 78 40 b4 53 cc 7b a4 39 4e 7a bc 4d 88 66 91 83 08 f5 1f 36 34 61 31 a1 92 d3 9c 80 e2 1f 58 4c e6 68 89 b9 90 66 9f d7 ab bb 9c 51 c5 60 c7 24 df 1c e0 20 6a 09 aa ae aa 9c 33 09 6f 6e 40 0b d8 71 f6 00 3a e3 0a 2a 29 d2 3a d1 93 c9 c4 a8 94 61 32 5c af a2 10 e7 32 b2 f3 d3 b7 5b 3b b8 f3 1d cd f0 d2 1e 7a 7f 9a e8 9c 59 a0 e4 32 e9 75 79 31 9f 1a 63 7b 64 3d 7f 9b 05 6f 6f b8 11 9e f9 00 00 20 da 08 59 40 c1 74 26 d2 98 54 42 69 02 34 d1 5c 94 f6 6b 52 65 55 8b e2 51 5b 89 f9 9e ee fb a4 24 56 51 ca 77 c0 d3 98 ac 59 22 0a 76 4d 35 d2 8e c2 94 ef 5a b6 8e ec bd a7 39 38 8d df 36 40 47 e2 35 cc 6b 75 17 c0 b6 3b 50 33 54 fe 2e 44 60 18 72 fe 4a a2 4b f2 e3 cf 53 49 4b 2b b8 16 45 45 cb 03 dc 16 94 e7 4b d7 d9 53 b4 a0 5d a3 67 df c8 b0 cb cc e3 76 87 f5 85 b3 da c7 40 dd 9e 48 a7 47 eb e3 65 55 6b 28 69 c1 62 92 8b 2d 6f e2 05 43 5e 09 98 00 13 13 23 c6 e5 7c 31 ad f6 57 ce 55 2c 2f e6 f8 61 22 d3 86 16 3c 3f 2c e1 3d 93 29 2d a9 8f 57 fc 03 5b c2 ec 02 c1 5c 3c c3 68 86 f1 cc 32 15 ac 69 72 bf 95 a2 2e d3 b1 05 80 d1 6b f3 bb 82 b5 90 29 93 4b 50 22 e7 29 cc aa 3d 8c 2e 5f e0 75 05 15 4d 53 5e 6e 97 f0 aa da 13 d8 d1 bc 66 e8 fe 24 06 6a c9 52 db a6 a9 28 f3 03 fa 05 37 57 4f 0e 18 54 8e 3a 24 46 19 1b 84 1a bf 6e f7 e2 69 6d 46 32 78 9f d4 ea c6 b5 ce bc 12 ba 70 66 f1 3c 7e f7 7d 92 96 61 1a 21 8f 3d ea 49 2b e8 ea 88 9f df 12 e8 3e 3b 50 5f ca 08 ee

Source: global traffic	HTTP traffic detected: GET /Ornos2v.jpg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://logiamutusliber.com.ar/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WDYixm6.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://logiamutusliber.com.ar/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ornos2v.jpg HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WDYixm6.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /dan/gbsources HTTP/1.1Host: logiamutusliber.com.arConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dan/gbsources/ HTTP/1.1Host: logiamutusliber.com.arConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: logiamutusliber.com.ar
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49890 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@16/10@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2300,i,1858375456544592284,11987062658215177213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://logiamutusliber.com.ar/dan/gbsources"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2300,i,1858375456544592284,11987062658215177213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://logiamutusliber.com.ar/dan/gbsources	4%	Virustotal		Browse
http://logiamutusliber.com.ar/dan/gbsources	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse
bg.microsoft.map.fastly.net	0%	Virustotal		Browse
logiamutusliber.com.ar	1%	Virustotal		Browse
www.google.com	0%	Virustotal		Browse
s-part-0017.t-0009.fb-t-msedge.net	0%	Virustotal		Browse
ipv4.imgur.map.fastly.net	0%	Virustotal		Browse
i.imgur.com	0%	Virustotal		Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.68	true	false	0%, Virustotal, Browse	unknown
logiamutusliber.com.ar	198.27.76.221	true	true	1%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	0%, Virustotal, Browse	unknown
i.imgur.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://logiamutusliber.com.ar/dan/gbsources/	true		unknown
https://i.imgur.com/Ornos2v.jpg	false		unknown
https://i.imgur.com/WDYixm6.png	false		unknown
http://logiamutusliber.com.ar/dan/gbsources	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States		54113	FASTLYUS	false
198.27.76.221	logiamutusliber.com.ar	Canada		16276	OVHFR	true

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527698
Start date and time:	2024-10-07 08:56:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://logiamutusliber.com.ar/dan/gbsources
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/10@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.74.206, 142.251.168.84, 34.104.35.123, 142.250.185.138, 142.250.186.74, 216.58.212.138, 172.217.18.10, 172.217.23.106, 142.250.186.42, 172.217.16.202, 216.58.206.74, 216.58.212.170, 142.250.181.234, 142.250.185.74, 142.250.186.138, 142.250.186.106, 142.250.186.170, 142.250.184.202, 142.250.74.202, 4.245.163.56, 199.232.214.172, 192.229.221.95, 40.69.42.241, 142.250.186.35
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://logiamutusliber.com.ar/dan/gbsources/ Model: jbxai	{ "brand":["Global Sources"], "contains_trigger_text":true, "trigger_text":"Please verify your supplier ID to view this product...", "prominent_button_name":"View Product", "text_input_field_labels":["Company Email:", "Password:"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Please verify your supplier ID to view this product... Company Email: Password: Enter your email password Stay signed in View Product", "has_visible_qrcode":false}

URL: http://logiamutusliber.com.ar/dan/gbsources/ Model: jbxai	{ "phishing_score":9, "brands":"Global Sources", "legit_domain":"globalsources.com", "classification":"known", "reasons":["The brand 'Global Sources' is a known brand associated with the domain 'globalsources.com'.", "The provided URL 'logiamutusliber.com.ar' does not match the legitimate domain of Global Sources.", "The URL 'logiamutusliber.com.ar' does not contain any recognizable elements related to 'Global Sources'.", "The domain extension '.com.ar' is unusual for a global brand like Global Sources, which typically uses '.com'.", "The URL does not contain any subdomains or elements that suggest a legitimate association with Global Sources."], "brand_matches":[false], "url_match":false, "brand_input":"Global Sources", "input_fields":"Company Email:"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6022
Category:	downloaded
Size (bytes):	1522
Entropy (8bit):	7.876477541306776
Encrypted:	false
SSDEEP:	24:XxEzrlHKpUQoxRm+erW6mj4AYevQl6D8s3Rc2vdnnTFXQ/Z8pmcuuvNCMivO9NW6:Xx494HoPH6m8GvQgnnnT9/uIsvO26n
MD5:	A839E294962800680AFFDF4B5A2075E7
SHA1:	D542394BD95F3FEE680867324C7E90CD32CD4FCA
SHA-256:	F694B97D27E9C1ED371FCADCB4D00D317A7D1EEBDD1E0981304466D5CA089708
SHA-512:	29D021ADDE250B27E990062754E0B4824A4C58293E8B3B0AAD5E779A206AA34790C26BF34F05AF41B2B718F871A6278ACBA93049C54F1C379280AF4897FC8CEA
Malicious:	false
Reputation:	low
URL:	http://logiamutusliber.com.ar/dan/gbsources/
Preview:	............]o.6.Y......-.....lI:.i..u.#-...I.H.;...o....}8r.n...,."...}2.t.....t..LS.....br-J.J=~w....~.D........J.t...T<..l.......Y.....\.i.oE-.........9[...e&vL...\......t:...(...,..9O...(.h.gQ..{.,....I..'.$...../.U.%.I....M-.Ox...$.E...O\|_.. .e<4.@....Ez..+&..%^.(~.......... .t.3..1IX......F.H.U.S...f:&d..:.tD......`.,<.Tg.B...."^lA.dX...R..n.s....-#Q.(.f=.b;.E..{.?.4....U.Z.zkT....<W.Mx........>.o.5......&.[...[.H...c\|'...ex@.S.{.9Nz.M.f.....64a1......XL.h...f....Q.`.$... j.....3.on@..q..:..*).:....a2\....2...[;.......z...Y..2.uy1..c{d=...oo...... ..Y@.t&.TBi.4.\..kReU..Q[......$VQ.w...Y".vM5...Z...98..6@G.5.ku...;P3T..D`.r.J.K...SIK+..EE......K..S..].g.....v......@.H.G..eUk(i.b..-o..C^.....#..\|1..W.U,/..a"..<?,.=.)-..W..[....\<.h...2..ir........k...).KP".).=.._.u..MS^n......f..$.j.R..(....7WO..T.:$F.....n..imF2x.......pf.<~.}..a.!.=.I+.....>;P_...R.B......1......i..Yv......uT...P...}.!..Ak-6"..[.c.7=.......\|...[L.l.5.....x.

Chrome Cache Entry: 42

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 31, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1178
Entropy (8bit):	7.751006752836354
Encrypted:	false
SSDEEP:	24:nudILXVi0nYHIpR2tK7sIItPuw4SL9xftNWro3M:ud8ViSYopiK79ItPuMnp3M
MD5:	A887C3BBC4838E44C29468D28ADFF12F
SHA1:	6FB78E76377FE8DAC969E3B05B1B3829DDDBC705
SHA-256:	BA05E751F3FDFB70DD45B1B61D40BEC97A9D6C7FF1B09E0D8DF9D73A7A6C4F18
SHA-512:	031CEC58FF011B51751BC69C1DD5CF61C806CF5B8B36C830ED64A3D5E9A94B7B639358AA0D03E4B57F1643BF78FA6C635D1FD51529711C53E4155CCFCB54ADFC
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/WDYixm6.png
Preview:	.PNG........IHDR... ..........4X.....sRGB.........gAMA......a....DIDATHK._HSa..O.Z!...".F....W.].e..uQ..M.B..Q....H.aT^Da.R.A..(,.b.9..t.6..6...t;......?.B.1...}..>..<.\..X..... .H....5.....y.. ..-x.q.?.\|.o..[WF>.<.]=..gt".2...C...N..^..'..z.k..v..;..7.....6.....G.oi9.:....9...].c..P.[.<9.<..R\|b.4W.H. X...0.h.....: `$N..=.:..>.........pdzzz)R....7.FfOQYx(........<h.......Wm.t.M....:@.....$J"6.#\e.`...fC...T.u....l.3.u....#.gc.....8@,.7nh....&]N&9O...~d.........JN?.....<,%2U...7...<.h5.&:.':.%..>..K.l.;z.B..j...\|..J.$.B6.M.a.(.N3.VR:......a....4.4M...F.G.4.&...8I.de...rW2.)d3+......V!.e..xO.)..F.Cg.U..F9.~.....kA)"f.VI...UT.-.<B..Z.....:73.q........X....6K..6..)..e....X.4./..I..g."pE.a....F..` ..Cx......"b9.....".x..W"..w_..Y'......Y!!.....c..b..H.....c:Y...C6.7h.7..R........c...2,Q..dDsLOi.WQM..E8......j\.N.":N...v.a...;...cx0g$...a.].J.`f....4.h...].....1..W..lt..z1.6v...&i.4...t.3.Ti.\x...j .l!.$..U...@.b.0-x.h...=.V.].1.p.2e..D.........-.#y5.

Chrome Cache Entry: 43

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 31, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1178
Entropy (8bit):	7.751006752836354
Encrypted:	false
SSDEEP:	24:nudILXVi0nYHIpR2tK7sIItPuw4SL9xftNWro3M:ud8ViSYopiK79ItPuMnp3M
MD5:	A887C3BBC4838E44C29468D28ADFF12F
SHA1:	6FB78E76377FE8DAC969E3B05B1B3829DDDBC705
SHA-256:	BA05E751F3FDFB70DD45B1B61D40BEC97A9D6C7FF1B09E0D8DF9D73A7A6C4F18
SHA-512:	031CEC58FF011B51751BC69C1DD5CF61C806CF5B8B36C830ED64A3D5E9A94B7B639358AA0D03E4B57F1643BF78FA6C635D1FD51529711C53E4155CCFCB54ADFC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..........4X.....sRGB.........gAMA......a....DIDATHK._HSa..O.Z!...".F....W.].e..uQ..M.B..Q....H.aT^Da.R.A..(,.b.9..t.6..6...t;......?.B.1...}..>..<.\..X..... .H....5.....y.. ..-x.q.?.\|.o..[WF>.<.]=..gt".2...C...N..^..'..z.k..v..;..7.....6.....G.oi9.:....9...].c..P.[.<9.<..R\|b.4W.H. X...0.h.....: `$N..=.:..>.........pdzzz)R....7.FfOQYx(........<h.......Wm.t.M....:@.....$J"6.#\e.`...fC...T.u....l.3.u....#.gc.....8@,.7nh....&]N&9O...~d.........JN?.....<,%2U...7...<.h5.&:.':.%..>..K.l.;z.B..j...\|..J.$.B6.M.a.(.N3.VR:......a....4.4M...F.G.4.&...8I.de...rW2.)d3+......V!.e..xO.)..F.Cg.U..F9.~.....kA)"f.VI...UT.-.<B..Z.....:73.q........X....6K..6..)..e....X.4./..I..g."pE.a....F..` ..Cx......"b9.....".x..W"..w_..Y'......Y!!.....c..b..H.....c:Y...C6.7h.7..R........c...2,Q..dDsLOi.WQM..E8......j\.N.":N...v.a...;...cx0g$...a.].J.`f....4.h...].....1..W..lt..z1.6v...&i.4...t.3.Ti.\x...j .l!.$..U...@.b.0-x.h...=.V.].1.p.2e..D.........-.#y5.

Chrome Cache Entry: 44

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 820x76, components 3
Category:	dropped
Size (bytes):	11011
Entropy (8bit):	7.805786102800336
Encrypted:	false
SSDEEP:	192:o9Vxc/+i2PwcZ1LW0cJPxfJO0YlDcVSjF0Vj5g4ATgZZYgsssssssssssy:kxgYw82JNNYliYF0LVATg/3ssssssssl
MD5:	23A1D047C679420619990A93A8679891
SHA1:	872AF0965DCDA27267BCE49E27D20F1DEB250D0B
SHA-256:	E74244BE91C45E39C93414B38460A6EC6D11B95B4CAF57486CAAABF43D450C7D
SHA-512:	BFE1F50D6EF33FB3CDD831C8EFDDD6848CC2AB7C30182602EFAE55B4B3EC081A922C82CE3BE214181B49982B60355DE8A80F9A7861B8AD97C86BC8BE5137F979
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.......................................................................L.4.."..........................................C................................!U..."1AQ.#a.23..$%Rbq.49:Brtv..................................3.....................!1A...Q.."q.....a.2..B.R................?.........."0>..2..,........Z...~.....m.n{.3 ..Dy....u..k.\|.......v..V.J.iR...#.G..q.T.u.)..WT<...k).,q+.)......n.....r...0.L.x....^jW'=....m.D.......$.I.qfjQ....g.D7N.s3......k..b.IRP....&S&.....H..........5...k...C.d.9e..4.>.ss#..m...u..~Kq..\|Gj.%..\.NQ3O..)..+.N..+.P.I.(.ChQ...l."...w....^g.;k...c..i..(7;..a^0.._...W...#q.....\..p..VFt..i.;l.4....U!./.-.......D6..q)..Q.i.g.f.D.SX7-...+.3.V.}........r..WR.>.~..w....v4....{........B..vD..O.....>M.W...{i..j..\.r.8M...$..G.I"#33...c)IF.>..W?....r.9T.....y...>.*.v=...t..f.......o.m.........GM~.90....Z.T...i.>.~\|..?.s...u.....}.....o.}...t.ZXK...

Chrome Cache Entry: 45

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 820x76, components 3
Category:	downloaded
Size (bytes):	11011
Entropy (8bit):	7.805786102800336
Encrypted:	false
SSDEEP:	192:o9Vxc/+i2PwcZ1LW0cJPxfJO0YlDcVSjF0Vj5g4ATgZZYgsssssssssssy:kxgYw82JNNYliYF0LVATg/3ssssssssl
MD5:	23A1D047C679420619990A93A8679891
SHA1:	872AF0965DCDA27267BCE49E27D20F1DEB250D0B
SHA-256:	E74244BE91C45E39C93414B38460A6EC6D11B95B4CAF57486CAAABF43D450C7D
SHA-512:	BFE1F50D6EF33FB3CDD831C8EFDDD6848CC2AB7C30182602EFAE55B4B3EC081A922C82CE3BE214181B49982B60355DE8A80F9A7861B8AD97C86BC8BE5137F979
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/Ornos2v.jpg
Preview:	.....C....................................................................C.......................................................................L.4.."..........................................C................................!U..."1AQ.#a.23..$%Rbq.49:Brtv..................................3.....................!1A...Q.."q.....a.2..B.R................?.........."0>..2..,........Z...~.....m.n{.3 ..Dy....u..k.\|.......v..V.J.iR...#.G..q.T.u.)..WT<...k).,q+.)......n.....r...0.L.x....^jW'=....m.D.......$.I.qfjQ....g.D7N.s3......k..b.IRP....&S&.....H..........5...k...C.d.9e..4.>.ss#..m...u..~Kq..\|Gj.%..\.NQ3O..)..+.N..+.P.I.(.ChQ...l."...w....^g.;k...c..i..(7;..a^0.._...W...#q.....\..p..VFt..i.;l.4....U!./.-.......D6..q)..Q.i.g.f.D.SX7-...+.3.V.}........r..WR.>.~..w....v4....{........B..vD..O.....>M.W...{i..j..\.r.8M...$..G.I"#33...c)IF.>..W?....r.9T.....y...>.*.v=...t..f.......o.m.........GM~.90....Z.T...i.>.~\|..?.s...u.....}.....o.}...t.ZXK...

Chrome Cache Entry: 46

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:JfUxdy:Jfody
MD5:	F4422918C232E6AD22F5493761B1F5E1
SHA1:	A5FBD668EBB72AEE33A3D0025D2B648762CF27B0
SHA-256:	00207579640866C297D1ADA1A0AF42EA2C6FD104F076805833EF7D571E5A4734
SHA-512:	1E531CE40F9E0796A0F096C59D7B30044F8D4B1E66B36DA5FC9EBBD27F9FAF5D5107EEFE6B8F289447BB051453361C76E87C4C9B9A5D448668A5353C55702DAB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnhdGcShCmVFBIFDWbOpPESBQ3OQUx6?alt=proto
Preview:	ChIKBw1mzqTxGgAKBw3OQUx6GgA=

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-07T08:58:08.065087+0200	2030302	ET PHISHING Common Form POST - Possible Generic Phishing Landing 2020-06-11	2	198.27.76.221	80	192.168.2.4	49735	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 08:57:55.713460922 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 7, 2024 08:57:56.660367012 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:56.661174059 CEST	49736	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:56.665178061 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:56.665261030 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:56.665421963 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:56.666125059 CEST	80	49736	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:56.666194916 CEST	49736	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:56.670391083 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:57.154073000 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:57.156936884 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:57.161921024 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:57.266515970 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:57.266550064 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:57:57.266649008 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:57:57.291909933 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:57.291937113 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:57.292013884 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:57.292268038 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:57.292287111 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:57.867773056 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:57.920732021 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.202402115 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.202441931 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.204519033 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.204535007 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.204602957 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.210278988 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.210375071 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.212146997 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.212157011 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.259613037 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.308492899 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.308655977 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.308707952 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.308727980 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.308792114 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.308840036 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.308846951 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.309122086 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.309168100 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.309173107 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.309361935 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.309411049 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.309417009 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.317917109 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.317974091 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.386073112 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:58.386132002 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:58.386212111 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:58.387068987 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:58.387094975 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:58.415260077 CEST	49739	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.415291071 CEST	443	49739	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.440130949 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.440180063 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.440253973 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.441608906 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.441626072 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.559206009 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.559258938 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.559329033 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.559886932 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.559906006 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.901654005 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.902111053 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.902148008 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.903289080 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.903780937 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.904131889 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.904256105 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:58.951409101 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.999114990 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.999375105 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:58.999444008 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.028722048 CEST	49742	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.028764009 CEST	443	49742	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.032433987 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.033874035 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.033915997 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.034944057 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.035003901 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.037993908 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.038058043 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.038355112 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.038362980 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.056948900 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:59.062483072 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:59.062547922 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:59.064114094 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:59.064189911 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:59.069900036 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:59.070039034 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:59.089659929 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.120951891 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:59.121016979 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:57:59.136991978 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137074947 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137114048 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.137137890 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137252092 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137291908 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.137299061 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137342930 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.137381077 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.137386084 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.139976025 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.140013933 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.140021086 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.140096903 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.140139103 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.141338110 CEST	49743	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.141355038 CEST	443	49743	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.167881012 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:57:59.169327021 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.169358969 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:57:59.169425011 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.171502113 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.171519995 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:57:59.509915113 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.510023117 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.510139942 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.510577917 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:57:59.510607958 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.841026068 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:57:59.841098070 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.848634958 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.848649025 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:57:59.849066973 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:57:59.901174068 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:57:59.971012115 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:57:59.971299887 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.015399933 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:00.026226997 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.047988892 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.048005104 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.048517942 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.049290895 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.049371958 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.049551010 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.095408916 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.146092892 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.146192074 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.146318913 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.147540092 CEST	49745	443	192.168.2.4	199.232.192.193
Oct 7, 2024 08:58:00.147584915 CEST	443	49745	199.232.192.193	192.168.2.4
Oct 7, 2024 08:58:00.160692930 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:00.160845995 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:00.160897970 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.220082998 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.220108032 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:00.707962990 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.708066940 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:00.708141088 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.708422899 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:00.708462000 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.357352972 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.357434988 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.376182079 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.376229048 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.377218008 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.380397081 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.427397966 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.632222891 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.632373095 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.632433891 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.634130001 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.634130001 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 7, 2024 08:58:01.634174109 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:01.634197950 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 7, 2024 08:58:07.941108942 CEST	80	49736	198.27.76.221	192.168.2.4
Oct 7, 2024 08:58:07.941205025 CEST	49736	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:58:08.065087080 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:58:08.065154076 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:58:08.794545889 CEST	49736	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:58:08.794658899 CEST	49735	80	192.168.2.4	198.27.76.221
Oct 7, 2024 08:58:08.799523115 CEST	80	49736	198.27.76.221	192.168.2.4
Oct 7, 2024 08:58:08.799542904 CEST	80	49735	198.27.76.221	192.168.2.4
Oct 7, 2024 08:58:08.946481943 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:08.946626902 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:08.946727037 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:10.948312044 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 7, 2024 08:58:10.953824043 CEST	80	49723	93.184.221.240	192.168.2.4
Oct 7, 2024 08:58:10.953888893 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 7, 2024 08:58:11.112051010 CEST	49741	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:11.112116098 CEST	443	49741	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:48.054218054 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.054243088 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.054342031 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.054696083 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.054708958 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.727366924 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.727448940 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.731625080 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.731632948 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.731935024 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.739893913 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.787409067 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.853619099 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.853681087 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.853724957 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.853760958 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.853776932 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.853815079 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.853821993 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.934838057 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.934900045 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.934926033 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.934937954 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.935002089 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.941704988 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.941747904 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.941781044 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.941791058 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:48.941821098 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:48.941842079 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.022546053 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.022610903 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.022629976 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.022644043 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.022676945 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.022690058 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.024174929 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.024235964 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.024250031 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.024260044 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.024281979 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.024305105 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.025290012 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.025348902 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.025358915 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.025377989 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.025420904 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.025443077 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.030195951 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.030241013 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.030268908 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.030278921 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.030302048 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.030317068 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.111190081 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.111211061 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.111257076 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.111268044 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.111304998 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.112833023 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.112854958 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.112895966 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.112906933 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.112932920 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.112941027 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.114377975 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.114392996 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.114447117 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.114455938 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.114495993 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.115844011 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.115859032 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.115920067 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.115928888 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.116009951 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.116802931 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.116818905 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.116867065 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.116874933 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.117010117 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118526936 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118541002 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118566036 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118596077 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118604898 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118638992 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118648052 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118802071 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118891001 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118906021 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.118916988 CEST	49756	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.118921995 CEST	443	49756	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.177551985 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.177673101 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.177834988 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.181066036 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.181101084 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.181169033 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.181461096 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.181493044 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.182754993 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.182764053 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.182868004 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.182951927 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.182965040 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.183011055 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.183018923 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.184510946 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.184541941 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.184672117 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.188384056 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.188400030 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.189372063 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.189382076 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.189438105 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.189562082 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.189574003 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.836030960 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.836608887 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.836649895 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.837148905 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.837156057 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.837613106 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.838021040 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.838037968 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.838603973 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.838608980 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.842716932 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.843121052 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.843141079 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.843683004 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.843688965 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.845585108 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.845633984 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.845935106 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.845949888 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.846330881 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.846338987 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.846554995 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.846565008 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.846903086 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.846909046 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.945574045 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.945600033 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.945672989 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.945698023 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.945746899 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.945750952 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.945796967 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.946016073 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.946041107 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.946053982 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.946062088 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.948256016 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.948432922 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.948482037 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.948591948 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.948607922 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.948616982 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.948621988 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.949203014 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.949230909 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.949301958 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.949738026 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.949748993 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.951387882 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.951416016 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.951710939 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.951860905 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.951868057 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.952965975 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.952991962 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.953035116 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.953044891 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.953057051 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.953123093 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.953310013 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.953324080 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.953334093 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.953339100 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955113888 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955235958 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955296040 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955308914 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955358028 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955405951 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955658913 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955663919 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955667019 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955677032 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955682039 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955687046 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955708981 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955724001 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.955751896 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.955780983 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.956119061 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.956124067 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.956346989 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.956366062 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.958277941 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958287954 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.958369970 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958503962 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958513021 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.958578110 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958642006 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958657026 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:49.958724022 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:49.958733082 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.744244099 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.744869947 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.744895935 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.745332003 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.745351076 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.746133089 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.746486902 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.746532917 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.747117996 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.747124910 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.755528927 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.755934000 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.755949020 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.756295919 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.756300926 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.758905888 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.759134054 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.759354115 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.759361982 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.759510040 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.759526968 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.760056973 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.760061979 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.760097027 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.760102034 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.853105068 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.853250027 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.853425026 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.853468895 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.853492975 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.853506088 CEST	49767	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.853512049 CEST	443	49767	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856339931 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856520891 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856698990 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.856734991 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.856775045 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.856785059 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856796980 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856810093 CEST	49766	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.856817961 CEST	443	49766	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.856928110 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.857055902 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.857070923 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.859489918 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.859523058 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.859620094 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.859723091 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.859734058 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.869791985 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.869863987 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.869920969 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.870321989 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.870328903 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.870342970 CEST	49763	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.870347977 CEST	443	49763	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873022079 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873048067 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873075008 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873132944 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873133898 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873199940 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873311043 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873327017 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873337030 CEST	49764	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873342037 CEST	443	49764	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.873414993 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.873426914 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.874993086 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.875073910 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.875135899 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.875202894 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.875225067 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.875240088 CEST	49765	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.875247002 CEST	443	49765	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.875955105 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.875981092 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.876082897 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.876384020 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.876398087 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.877661943 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.877702951 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:50.877911091 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.878087044 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:50.878102064 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.643872023 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.644406080 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.644432068 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.645124912 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.645128965 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.646455050 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.646903992 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.646929979 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.647567034 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.647574902 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.648255110 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.648777962 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.648791075 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.649710894 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.649717093 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.651097059 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.651638031 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.651649952 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.652318001 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.652323961 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.659105062 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.659477949 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.659485102 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.660147905 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.660151958 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.753751040 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.753818035 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.753890038 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.754234076 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.754249096 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.754293919 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.754298925 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.756369114 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.756442070 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.756688118 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.756825924 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.756848097 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.756860018 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.756866932 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.758564949 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.758657932 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.759263039 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.759510040 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.759654999 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.759880066 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.759905100 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.759923935 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.760056019 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.760515928 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.760544062 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.760791063 CEST	49771	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.760797024 CEST	443	49771	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.762809038 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.762816906 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.762864113 CEST	49768	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.762870073 CEST	443	49768	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.764203072 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.764218092 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.766084909 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.766096115 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.766376972 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.767443895 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.767471075 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.767662048 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.767673016 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.767695904 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.767767906 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.767780066 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.769277096 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.769318104 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.772825956 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.772948027 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.772965908 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.772989035 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.773035049 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.773263931 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.773422003 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.773428917 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.773442030 CEST	49769	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.773446083 CEST	443	49769	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.775965929 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.775988102 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:51.776097059 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.776272058 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:51.776279926 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.423036098 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.423542976 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.423608065 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.423988104 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.424002886 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.437613010 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.437968016 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.437983036 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.438312054 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.438317060 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.451798916 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.452178955 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.452261925 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.452622890 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.452637911 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.460483074 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.460844994 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.460908890 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.461245060 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.461261034 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.478758097 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.479140997 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.479171038 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.479543924 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.479549885 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.531909943 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.532082081 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.532156944 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.532262087 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.532288074 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.532304049 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.532313108 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.535326004 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.535356045 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.535619020 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.535895109 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.535906076 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.547617912 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.547775984 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.547852039 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.547982931 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.547990084 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.548038960 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.548043013 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.553349972 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.553431988 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.553505898 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.553679943 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.553710938 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.563688993 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.563767910 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.563847065 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.564019918 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.564069033 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.564096928 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.564115047 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.567558050 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.567614079 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.567682981 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.567938089 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.567956924 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.578341007 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.578409910 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.578463078 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.578663111 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.578686953 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.582458973 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.582484007 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.582720041 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.582936049 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.582947016 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.610471010 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.610614061 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.610675097 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.611087084 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.611115932 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.611141920 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.611155987 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.616807938 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.616832018 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:52.617048025 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.617229939 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:52.617240906 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.205264091 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.205733061 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.205916882 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.205959082 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.206907988 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.206916094 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.207488060 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.207561970 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.208295107 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.208307981 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.224329948 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.224788904 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.224819899 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.225455046 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.225465059 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.261428118 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.261961937 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.261991978 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.262670040 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.262675047 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.284111977 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.284672976 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.284691095 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.285310984 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.285316944 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.313150883 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.313232899 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.313285112 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.316608906 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.316772938 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.316868067 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.330183983 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.330220938 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.330238104 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.330246925 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.331688881 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.331707954 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.334367037 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.334443092 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.334506035 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.336852074 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.336926937 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.336998940 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.337902069 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.337924004 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.339303017 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.339337111 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.340897083 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.340950966 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.341176033 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.342453003 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.342542887 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.342618942 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.342781067 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.342809916 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.342945099 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.342959881 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.371967077 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.372031927 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.372100115 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.372621059 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.372632980 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.372667074 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.372672081 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.375381947 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.375431061 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.375565052 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.375710964 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.375746012 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.395430088 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.395505905 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.395551920 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.395749092 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.395765066 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.395776033 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.395781040 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.398538113 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.398586988 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.398653030 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.398837090 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:53.398857117 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:53.999908924 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.004771948 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.011590004 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.041533947 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.042325020 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.042661905 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.042680979 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.055316925 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.055339098 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.055764914 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.055777073 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.056453943 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.056461096 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.057176113 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.057179928 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.060930014 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.079798937 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.079838037 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.080523014 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.080537081 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.080893993 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.080905914 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.082290888 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.082299948 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.083447933 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.083487988 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.084342957 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.084357977 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.158204079 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.158284903 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.158338070 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.158476114 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.158498049 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.158512115 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.158519030 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.160590887 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.160667896 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.160780907 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.161387920 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.161405087 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.161417961 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.161423922 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.166815996 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.166847944 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.166927099 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.168018103 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.168026924 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.168091059 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.168489933 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.168500900 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.168878078 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.168889046 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.184999943 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.185079098 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.185352087 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.185415983 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.185453892 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.185481071 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.185497046 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.186662912 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.186743975 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.186876059 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.187155962 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.187169075 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.187208891 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.187220097 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.189167976 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.189225912 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.189273119 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.189505100 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.189521074 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.193382978 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.193419933 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.193519115 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.193692923 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.193703890 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.195600986 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.195635080 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.195744038 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.197129965 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.197150946 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.197412014 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.197422981 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.197429895 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.197979927 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.197989941 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.761287928 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.762077093 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.762099028 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.762765884 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.762773037 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.863344908 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.864202976 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.864278078 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.865432978 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.865448952 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.865695000 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.865741014 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.866316080 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.866341114 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.867177963 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.867183924 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.867779016 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.867801905 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.868880987 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.868887901 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.871511936 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.871659994 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.871761084 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.871898890 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.871898890 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.871915102 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.871922970 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.875065088 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.875150919 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.875225067 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.875339031 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.875364065 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.886317015 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.886790037 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.886814117 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.887559891 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.887566090 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.968760967 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.968940973 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.969011068 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.969099045 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.969147921 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.969183922 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.969202042 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.971884966 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.971927881 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.972017050 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.972254038 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.972269058 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.974905014 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.975061893 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.975135088 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.975198030 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.975207090 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.975234032 CEST	49792	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.975239038 CEST	443	49792	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977123022 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977157116 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977219105 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977349043 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977361917 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977669954 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977741957 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977782965 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977914095 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977914095 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.977929115 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.977937937 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.980007887 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.980052948 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:54.980115891 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.980254889 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:54.980273962 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.006580114 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.006725073 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.006777048 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.006817102 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.006834030 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.006859064 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.006864071 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.008759022 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.008796930 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.008869886 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.008986950 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.009011984 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.447174072 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.448353052 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.448395967 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.449273109 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.449284077 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.555454969 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.555522919 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.555576086 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.555850983 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.555870056 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.555881977 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.555891037 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.607491016 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.607536077 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.607604027 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.607743979 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.607753992 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.635340929 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.635900974 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.635983944 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.636518002 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.636532068 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.644915104 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.645220995 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.645230055 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.645773888 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.645777941 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.654829979 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.655144930 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.655170918 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.655668974 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.655673981 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.667092085 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.667999983 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.668030977 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.668514967 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.668530941 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.743405104 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.743585110 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.743654966 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.744385004 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.744410038 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.747586012 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.747641087 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.747730017 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.748006105 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.748019934 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.755789995 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.755938053 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.755995989 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.756134033 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.756150007 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.756180048 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.756185055 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.758234024 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.758277893 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.758423090 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.758557081 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.758567095 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.767787933 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.767935991 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.768035889 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.768151999 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.768168926 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.768179893 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.768183947 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.769824028 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.769834042 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.769989014 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.770133018 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.770143032 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.779736996 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.779898882 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.779966116 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.782063961 CEST	49798	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.782104969 CEST	443	49798	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.784678936 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.784697056 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:55.784771919 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.784904957 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:55.784917116 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.277605057 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.280606031 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.280633926 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.281131029 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.281140089 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.388039112 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.388194084 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.388257980 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.446254969 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.450932980 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.450932980 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.450957060 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.450965881 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.453145027 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.453171015 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.453640938 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.453648090 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.455924034 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.455962896 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.456059933 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.456265926 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.456294060 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.461225986 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.461579084 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.461607933 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.462162018 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.462167025 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.463947058 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.464981079 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.465003014 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.467513084 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.467519045 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.470253944 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.471721888 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.471730947 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.472553968 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.472558022 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.561189890 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.561337948 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.561407089 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.561486006 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.561511040 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.561556101 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.561562061 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.564124107 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.564225912 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.564333916 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.564511061 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.564544916 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.570188046 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.570574045 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.570621967 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.570662022 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.570676088 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.570687056 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.570702076 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.572937965 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.572962046 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.573045015 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.573162079 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.573188066 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.573563099 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.573713064 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.573775053 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.573806047 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.573821068 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.573834896 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.573839903 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.575572014 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.575617075 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.575690985 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.575788021 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.575814962 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.585300922 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.585362911 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.585406065 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.585496902 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.585496902 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.585503101 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.585510015 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.587436914 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.587493896 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:56.587563992 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.587699890 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:56.587726116 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.137331963 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.137801886 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.137825966 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.138345957 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.138351917 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.216367006 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.216846943 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.216862917 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.217401028 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.217407942 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.231669903 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.232059956 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.232076883 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.232510090 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.232516050 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.240514994 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.240866899 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.240919113 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.241350889 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.241368055 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.244726896 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.245157003 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.245208025 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.245954990 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.245979071 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.249675035 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.249748945 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.249803066 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.250008106 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.250047922 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.250077009 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.250093937 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.252789974 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.252823114 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.253034115 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.253034115 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.253062963 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.326848984 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.326931953 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.327049017 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.327157974 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.327176094 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.327188969 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.327197075 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.329996109 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.330029011 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.330352068 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.330774069 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.330781937 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.347364902 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.347470045 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.347585917 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.347639084 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.347654104 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.347672939 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.347680092 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350290060 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350351095 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350416899 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350445032 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350508928 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350615025 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350632906 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350645065 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350687981 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350697041 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.350708008 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.350712061 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.352648973 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.352694035 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.352752924 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.352864027 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.352876902 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.354569912 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.354645967 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.354708910 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.354862928 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.354862928 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.354909897 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.354938984 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.356944084 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.356985092 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.357054949 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.357218027 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.357228041 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.904388905 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.904891014 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.904901981 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:57.905360937 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:57.905365944 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.006735086 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.007237911 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.007261992 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.007662058 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.007667065 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.015541077 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.015701056 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.015757084 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.015783072 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.015794039 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.015810013 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.015816927 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.018294096 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.018306971 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.018336058 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.018394947 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.018624067 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.018637896 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.018641949 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.018666029 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.018804073 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.019011974 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.019018888 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.019084930 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.019093037 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.019411087 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.019416094 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.050610065 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.051145077 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.051179886 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.051529884 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.051536083 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.115416050 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.115504980 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.115571976 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.115725994 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.115742922 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.115756035 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.115761995 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.119057894 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.119103909 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.119308949 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.119582891 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.119596004 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133326054 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133414984 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133482933 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.133668900 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.133687973 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133698940 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.133704901 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133883953 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133945942 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.133990049 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.134063005 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.134076118 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.134085894 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.134090900 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.142123938 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142179012 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.142271996 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142400026 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142414093 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.142602921 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142644882 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.142693043 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142790079 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.142801046 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.187421083 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.187517881 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.187628984 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.187793016 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.187793016 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.187841892 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.187872887 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.190547943 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.190644026 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.190748930 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.190912962 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.190952063 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.417701960 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:58.417749882 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:58.417844057 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:58.418085098 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:58.418097973 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:58.698503971 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.699011087 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.699040890 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.699459076 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.699465036 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.718820095 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.719331980 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.719363928 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.719723940 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.719731092 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.795622110 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.796063900 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.796087027 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.796516895 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.796524048 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.809797049 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.810444117 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.810467958 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.811017990 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.811022997 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.811316967 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.811373949 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.811512947 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.811722040 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.811748028 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.811765909 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.811772108 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.814538956 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.814585924 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.814661026 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.814881086 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.814892054 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.827589989 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.827675104 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.827750921 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.827840090 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.827886105 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.827917099 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.827934027 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.830025911 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.830070019 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.830300093 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.830535889 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.830549002 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.856430054 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.856848955 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.856892109 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.857234001 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.857247114 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.907375097 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.907463074 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.907537937 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.907694101 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.907717943 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.907731056 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.907737970 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.910599947 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.910645008 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.910804033 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.911137104 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.911149025 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.925956964 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.926034927 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.926093102 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.926268101 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.926286936 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.926300049 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.926305056 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.928714991 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.928766966 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.928832054 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.928937912 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.928946018 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.966074944 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.966150999 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.966274023 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.966351032 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.966351986 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.966393948 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.966422081 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.968497038 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.968528986 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:58.968648911 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.968811989 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:58.968822002 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.060205936 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:59.060554981 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:59.060569048 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:59.061712027 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:59.062052965 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:59.062233925 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:58:59.103955984 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:58:59.495379925 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.496723890 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.496740103 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.497247934 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.497252941 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.509438992 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.509974957 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.510026932 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.511192083 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.511195898 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.559943914 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.560378075 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.560396910 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.560777903 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.560784101 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.573781013 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.574049950 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.574074984 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.574469090 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.574475050 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.606807947 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.606985092 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.607222080 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.607407093 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.607407093 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.607424021 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.607433081 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.610486031 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.610515118 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.610578060 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.610830069 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.610843897 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.636842966 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.636995077 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.637106895 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.637141943 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.637142897 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.637164116 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.637175083 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.639075041 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.639103889 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.639276028 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.639395952 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.639408112 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.666976929 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.667618990 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.667633057 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.667743921 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.667809010 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.667937994 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.668555975 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.668561935 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.669167042 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.669186115 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.669198036 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.669203043 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.675158024 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.675185919 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.675355911 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.676147938 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.676160097 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.686558962 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.686707973 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.686769009 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.687035084 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.687042952 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.691891909 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.691981077 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.692147970 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.692368031 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.692397118 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.780904055 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.780973911 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.781297922 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.781554937 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.781577110 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.781635046 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.781642914 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.787592888 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.787645102 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:58:59.787709951 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.788119078 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:58:59.788136005 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.104409933 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 7, 2024 08:59:00.109622955 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 7, 2024 08:59:00.109694004 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 7, 2024 08:59:00.277700901 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.282123089 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.282150030 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.283277035 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.283288956 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.300852060 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.301356077 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.301378965 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.301870108 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.301878929 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.353344917 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.362957954 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.365602970 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.365627050 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.388349056 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.388355017 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.390265942 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.390423059 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.390569925 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.392712116 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.392735004 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.392749071 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.392755985 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.409936905 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.409966946 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.410311937 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.410319090 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.412543058 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.412605047 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.412712097 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.424027920 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.424027920 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.424043894 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.424053907 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.440522909 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.447518110 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.447551012 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.448553085 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.448565006 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.451961994 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.452003002 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.452334881 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.452594995 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.452615023 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.455593109 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.455631971 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.455698967 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.456091881 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.456108093 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.498112917 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.498178959 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.498292923 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.498389006 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.498404980 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.498414993 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.498420000 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.500730991 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.500776052 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.501013041 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.501156092 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.501166105 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.514003992 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.514082909 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.514134884 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.514251947 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.514273882 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.514312983 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.514321089 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.516120911 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.516151905 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.516437054 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.516437054 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.516459942 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.550640106 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.550720930 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.550914049 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.550997019 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.550997019 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.551035881 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.551059961 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.553334951 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.553366899 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:00.553523064 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.553639889 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:00.553649902 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.326483965 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.327224016 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.327600002 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.327682972 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.328489065 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.328505039 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.329010010 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.329042912 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.330013990 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.330032110 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.330127954 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.330749989 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.330796003 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.331691980 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.331707001 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.441920996 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442075014 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442440987 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.442553997 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.442601919 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442632914 CEST	49830	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.442651033 CEST	443	49830	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442665100 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442821026 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.442903042 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.443005085 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.443077087 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.443196058 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.443996906 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.444041014 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.444113970 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.444130898 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.447626114 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.447674036 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.447763920 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.447782993 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.452294111 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.452343941 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.452476025 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.453334093 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.453357935 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.455738068 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.455776930 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.455867052 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.456343889 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.456358910 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.458595991 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.458630085 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.458791018 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.459088087 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.459103107 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.513890982 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.514384031 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.514405012 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.514777899 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.514784098 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.522018909 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.522630930 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.522649050 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.523221970 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.523227930 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.620502949 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.620656013 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.620731115 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.620929003 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.620948076 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.620959997 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.620965958 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.625863075 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.625885963 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.626077890 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.626326084 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.626338005 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.632777929 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.632949114 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.633017063 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.633125067 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.633128881 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.633141041 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.633145094 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.637280941 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.637343884 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:01.637429953 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.637528896 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:01.637554884 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.111346960 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.111751080 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.111772060 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.112174034 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.112179995 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.133982897 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.134310961 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.134320974 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.134701014 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.134706020 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.138808966 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.139105082 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.139112949 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.139461994 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.139466047 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.231143951 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.231244087 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.231304884 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.231554031 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.231573105 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.237216949 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.237282991 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.237375975 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.237831116 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.237859964 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.248635054 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.248667955 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.248739958 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.248766899 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.248788118 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.248859882 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.249267101 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.249283075 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.249293089 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.249299049 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.252083063 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.252176046 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.252747059 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.258238077 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.258306980 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.258434057 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.259035110 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.259051085 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.259098053 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.259105921 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.259265900 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.259294033 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.263734102 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.263755083 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.263824940 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.264621973 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.264640093 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.293035030 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.293605089 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.293616056 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.294689894 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.294694901 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.294785023 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.295269012 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.295295000 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.296154976 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.296163082 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.405910015 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.405937910 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.405998945 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.406012058 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.406419039 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.406425953 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.406435013 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.406455040 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.406477928 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.406495094 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.409773111 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.409816980 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.409885883 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.410067081 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.410083055 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.410710096 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.410734892 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.410794020 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.410799026 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.410852909 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.411089897 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.411106110 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.414223909 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.414262056 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.414402962 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.414627075 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.414644003 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.908329010 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.908787966 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.908817053 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.909285069 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.909290075 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.955108881 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.956361055 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.956373930 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.957175016 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.957180023 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.983825922 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.984855890 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.984877110 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:02.985722065 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:02.985728025 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.021621943 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.021661997 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.021717072 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.021728039 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.021739960 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.021780968 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.022138119 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.022157907 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.022169113 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.022176027 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.028023005 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.028064013 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.028841972 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.029149055 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.029170990 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.069947004 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.070553064 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.070569992 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.071367025 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.071366072 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.071371078 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.075305939 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.075424910 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.075555086 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.075577021 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.075654984 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.075663090 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.080229998 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.080265045 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.080338001 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.080673933 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.080684900 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.089709997 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.090533018 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.090550900 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.091108084 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.091125965 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.110408068 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.111186981 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.111265898 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.111435890 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.111444950 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.111464024 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.111469030 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.115673065 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.115729094 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.115824938 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.115998983 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.116014957 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.178805113 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.178874016 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.178924084 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.186465025 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.186486959 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.186523914 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.186532021 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.189879894 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.189932108 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.189996958 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.192941904 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.192950964 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.200119972 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.200186014 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.200308084 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.209580898 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.209606886 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.209646940 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.209656954 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.287883043 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.287935972 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.288003922 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.288919926 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.288947105 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.686885118 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.687411070 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.687436104 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.687948942 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.687956095 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.731121063 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.731704950 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.731719017 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.732177019 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.732183933 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.772519112 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.773344040 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.773389101 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.773792028 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.773803949 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.795725107 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.795810938 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.795978069 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.796037912 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.796057940 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.796072006 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.796077967 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.799024105 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.799084902 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.799149990 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.799288988 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.799304962 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.838839054 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.838948965 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.839001894 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.839160919 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.839175940 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.839199066 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.839204073 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.841768980 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.841804028 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.841901064 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.842057943 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.842067003 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.847778082 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.848154068 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.848161936 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.848613977 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.848618031 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.880948067 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.881032944 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.881097078 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.881311893 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.881337881 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.881580114 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.881594896 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.883863926 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.883899927 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:03.884068012 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.884248972 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:03.884258032 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.230598927 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.230673075 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.230818033 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.232368946 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.250780106 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.250797033 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.250839949 CEST	49848	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.250847101 CEST	443	49848	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.252209902 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.252228975 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.252746105 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.252753973 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.254971027 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.255013943 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.255273104 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.255997896 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.256020069 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.354875088 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.355248928 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.355334044 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.360646009 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.360646009 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.360677958 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.360702038 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.365484953 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.365539074 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.365601063 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.365751028 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.365767002 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.478796959 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.523912907 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.523952961 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.524369001 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.524377108 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.535182953 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.535846949 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.535861015 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.536449909 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.536456108 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.548620939 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.549005985 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.549016953 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.549779892 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.549784899 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.630188942 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.630289078 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.630368948 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.630538940 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.630562067 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.630573988 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.630579948 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.650969982 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.651088953 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.651149035 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.651170969 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.651216030 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.658446074 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.658633947 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.658716917 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.664669991 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.664709091 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.664796114 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.667637110 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.667659044 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.667671919 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.667682886 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.670114040 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.670121908 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.670135021 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.670137882 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.672194004 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.672204018 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.676801920 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.676835060 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.676896095 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.677772045 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.677793980 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.679187059 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.679231882 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.679287910 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.679577112 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.679591894 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.926685095 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.928889036 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.928911924 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:04.934339046 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:04.934353113 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.022341967 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.022844076 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.022860050 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.023276091 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.023282051 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.038686991 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.038836956 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.038885117 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.038899899 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.038947105 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.050643921 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.050668001 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.050678968 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.050685883 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.132788897 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.132874012 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.133035898 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.180322886 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.180324078 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.180382013 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.180411100 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.182725906 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.182760954 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.182838917 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.183207989 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.183218002 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.184458971 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.184490919 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.184544086 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.184856892 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.184868097 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.336585045 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.337111950 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.337129116 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.337624073 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.337629080 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.354305983 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.355043888 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.355062008 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.355534077 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.355540037 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.368303061 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.368738890 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.368768930 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.369405985 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.369410992 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.447433949 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.447551966 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.447813988 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.447941065 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.447948933 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.447962999 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.447968006 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.451206923 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.451222897 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.451296091 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.451561928 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.451571941 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.468317032 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.468600988 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.468700886 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.468700886 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.468770027 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.468785048 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.471673965 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.471733093 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.471811056 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.471967936 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.472007990 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.480911970 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.481161118 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.481210947 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.481236935 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.481292963 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.481358051 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.481372118 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.481399059 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.481404066 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.484106064 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.484164953 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.484297991 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.484451056 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.484462023 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.844685078 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.845189095 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.845215082 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.845670938 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.845678091 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.861901999 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.862293005 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.862301111 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.862754107 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.862760067 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.954202890 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.954253912 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.954436064 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.954487085 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.954499006 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.954509974 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.954514980 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.957672119 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.957710981 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.957768917 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.957962990 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.957972050 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.973618984 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.973851919 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.973897934 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.973941088 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.973946095 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.973957062 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.973962069 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.976154089 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.976183891 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:05.976363897 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.976515055 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:05.976526022 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.112354040 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.112829924 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.112845898 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.113327980 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.113332987 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.137257099 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.137628078 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.137645960 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.138052940 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.138057947 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.166192055 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.167095900 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.167113066 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.167658091 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.167664051 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.220963001 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.221359015 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.221431971 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.221471071 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.221484900 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.221494913 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.221501112 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.224948883 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.224970102 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.225194931 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.225372076 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.225382090 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.247723103 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.247924089 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.247992992 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.248054028 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.248087883 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.248150110 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.248202085 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.248234987 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.248234987 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.248255968 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.248276949 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.250403881 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.250441074 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.250598907 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.250765085 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.250782013 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.280108929 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.280421019 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.280482054 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.280539989 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.280555964 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.280576944 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.280585051 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.282713890 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.282808065 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.282887936 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.283040047 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.283061028 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.625555038 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.626135111 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.626154900 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.626737118 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.626740932 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.636070013 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.636636972 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.636646986 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.637063980 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.637068987 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.734116077 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.734200001 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.734289885 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.737071991 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.737098932 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.737112045 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.737119913 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.740099907 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.740139961 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.740334034 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.740514040 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.740525961 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.772800922 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.772897005 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.772963047 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.772986889 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.773020029 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.773070097 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.773153067 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.773169994 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.773180008 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.773185015 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.776230097 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.776268959 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.776341915 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.776608944 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.776616096 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.880125046 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.880686998 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.880716085 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.881220102 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.881226063 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.906059027 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.906526089 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.906549931 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.907017946 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.907025099 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.956080914 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.956511974 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.956533909 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.956957102 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.956962109 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.989448071 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.989602089 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.989691019 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.989784002 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.989806890 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.989820957 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.989828110 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.992852926 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.992899895 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:06.993113995 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.993253946 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:06.993269920 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.017477036 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.017549038 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.017616034 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.017781973 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.017803907 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.017818928 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.017827034 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.020626068 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.020653963 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.020785093 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.020945072 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.020960093 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.070914984 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.070941925 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.070991039 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.071037054 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.071063995 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.071702003 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.071718931 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.071729898 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.071736097 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.074776888 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.074809074 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.074964046 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.075186014 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.075196981 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.390726089 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.391247034 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.391261101 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.392118931 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.392123938 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.473617077 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.474178076 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.474214077 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.474797964 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.474803925 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.502243996 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.502310038 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.502372980 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.502598047 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.502615929 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.502651930 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.502657890 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.506186962 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.506305933 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.506381035 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.506509066 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.506536961 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.586333990 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.586513042 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.586571932 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.586791039 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.586812973 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.586826086 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.586832047 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.590677023 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.590701103 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.590833902 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.590976954 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.590986013 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.974554062 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.975102901 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.975121975 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.975627899 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.975634098 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.977257013 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.977601051 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.977632999 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.977960110 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.977966070 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.981358051 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.981834888 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.981851101 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:07.982153893 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:07.982157946 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.085429907 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.085659981 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.085769892 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.086049080 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.086071968 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.086085081 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.086090088 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091072083 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091095924 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091134071 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091195107 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091325998 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.091581106 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.091653109 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.092556953 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.092608929 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.092737913 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.093213081 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.093235970 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.101468086 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.101491928 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.101525068 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.101531982 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.101878881 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.101927996 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.103873968 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.103916883 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.104193926 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.104223013 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.104242086 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.104295015 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.104394913 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.104409933 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.104465961 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.104475021 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.187712908 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.188277960 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.188338995 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.188765049 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.188786983 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.248827934 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.249516964 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.249569893 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.249994993 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.250005960 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.302684069 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.303134918 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.303215981 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.303306103 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.303306103 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.303333998 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.303347111 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.306139946 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.306185961 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.306263924 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.306433916 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.306447983 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.357752085 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.357840061 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.357999086 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.358227015 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.358282089 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.358313084 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.358330965 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.362128973 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.362178087 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.362251997 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.362493992 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.362505913 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.755439997 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.756216049 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.756278992 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.757153988 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.757168055 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.788295984 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.789069891 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.789093971 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.790280104 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.790286064 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.797024012 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.798880100 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.798906088 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.800282955 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.800288916 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.865502119 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.865605116 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.865681887 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.865736961 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.865891933 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.865909100 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.865940094 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.865946054 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.869434118 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.869494915 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.869571924 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.869704008 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.869721889 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.901905060 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.901969910 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.902054071 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.902229071 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.902247906 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.902314901 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.902321100 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.905443907 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.905481100 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.905678988 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.905678988 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.905710936 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.911433935 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.911531925 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.911679029 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.911799908 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.911801100 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.911845922 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.911875963 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.914769888 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.914792061 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.914926052 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.915169954 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.915184021 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.963934898 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:59:08.964016914 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:59:08.964323997 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:59:08.996664047 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.997503996 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.997522116 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:08.998810053 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:08.998819113 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.041959047 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.042509079 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.042534113 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.043396950 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.043401003 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.110155106 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.110219955 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.110492945 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.127253056 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.127270937 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.130609035 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.130661964 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.130805969 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.130933046 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.130944967 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.155584097 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.155652046 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.155700922 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.155716896 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.155760050 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.156115055 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.156130075 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.156141996 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.156147957 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.160898924 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.160940886 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.161140919 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.161633968 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.161648035 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.533756971 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.534246922 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.534285069 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.534749031 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.534756899 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.564681053 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.565124989 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.565151930 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.565735102 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.565741062 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.574816942 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.575339079 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.575355053 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.575680971 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.575685024 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.649061918 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.649164915 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.649211884 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.649466038 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.649493933 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.649516106 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.649523020 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.652631998 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.652724981 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.652800083 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.652980089 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.653011084 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.674163103 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.674422026 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.674468040 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.674496889 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.674590111 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.674590111 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.674619913 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.674647093 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.677411079 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.677449942 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.677511930 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.677722931 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.677736998 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.681586027 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.681760073 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.681813002 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.681854010 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.681859970 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.681946993 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.681952953 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.684546947 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.684587955 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.684648037 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.684791088 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.684804916 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.817162037 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.817862034 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.817890882 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.818628073 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.818634987 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.824660063 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.832416058 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.832454920 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.833020926 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.833029985 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.926426888 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.926501036 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.926554918 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.926727057 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.926743984 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.932023048 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.932054996 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.932110071 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.932310104 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.932327986 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.940901041 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.940943956 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.940987110 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.940999985 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.941042900 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.941138983 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.941159010 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.941171885 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.941179037 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.946372032 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.946419001 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:09.946482897 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.946898937 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:09.946909904 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.328201056 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.331351995 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.331444979 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.331845045 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.331859112 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.332639933 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.333911896 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.333935022 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.335164070 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.335175991 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.337637901 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.338187933 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.338203907 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.338937044 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.338943005 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.437247992 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.437382936 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.438374043 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.438460112 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.438460112 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.438487053 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.438498020 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.442446947 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.442471981 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.442652941 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.442792892 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.442814112 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.448025942 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.448055029 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.448101997 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.448118925 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.448151112 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.448342085 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.448342085 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.448355913 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.448364973 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.449774027 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.449871063 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.449917078 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.449924946 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.449970961 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.450221062 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.450258017 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.450289965 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.450304985 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.453591108 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.453618050 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.453746080 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.454607964 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.454619884 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.457210064 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.457248926 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.457447052 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.457627058 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.457638979 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.795526028 CEST	49819	443	192.168.2.4	142.250.186.68
Oct 7, 2024 08:59:10.795558929 CEST	443	49819	142.250.186.68	192.168.2.4
Oct 7, 2024 08:59:10.874882936 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.874892950 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.875374079 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.875401974 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.876276970 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.876288891 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.877358913 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.877378941 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:10.877949953 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:10.877966881 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.296844006 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.296921015 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.297004938 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.298701048 CEST	49889	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.298742056 CEST	443	49889	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.304274082 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.304323912 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.304572105 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.305773020 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.305784941 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.306265116 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.307594061 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.307655096 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.307954073 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.307975054 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.308006048 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.308012009 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.324094057 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.324114084 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.324795961 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.324992895 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.325006008 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.387195110 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.387907982 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.387943983 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.388427019 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.389070988 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.389081001 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.389324903 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.389345884 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.390161037 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.390167952 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.392640114 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.393134117 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.393157959 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.394032001 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.394037008 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.499648094 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.499986887 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.500066042 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.500153065 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.500190020 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.500235081 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.500252008 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.501961946 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.502142906 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.502269983 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.503582001 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.503611088 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.503722906 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.503731966 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.506846905 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.506912947 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.506963015 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.506973982 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.507008076 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.507447004 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.507476091 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.507539988 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.509202957 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.509227991 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.509321928 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.509507895 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.509526014 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.509536982 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.509541988 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.511039972 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.511059046 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.511295080 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.511316061 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.513731003 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.513767004 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.514177084 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.514234066 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.514242887 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.998475075 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.999128103 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.999149084 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:11.999866009 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:11.999870062 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.004554033 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.005038023 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.005050898 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.005819082 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.005822897 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.112134933 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.112174034 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.112226009 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.112240076 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.112365961 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.114581108 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.114603996 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.114674091 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.114680052 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.133986950 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.134057999 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.134145021 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.143229961 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.143245935 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.143589973 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.143629074 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.143958092 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.156994104 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.157004118 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.161326885 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.161406040 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.161535978 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.161767960 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.161798954 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.161935091 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.163345098 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.163379908 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.164202929 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.164211035 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.165752888 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.167433023 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.167440891 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.168183088 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.168188095 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.203970909 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.204505920 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.204523087 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.205321074 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.205326080 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282650948 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282660007 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282694101 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282723904 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282752037 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282757044 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.282814980 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.282816887 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.282960892 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.282974005 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.282977104 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.282993078 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.283005953 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.283010006 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.283010960 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.283015966 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.285780907 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.285845995 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.285850048 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.285902977 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.285954952 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.285979986 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.286114931 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.286128044 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.286134005 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.286153078 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.319303036 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.319485903 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.319634914 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.319720984 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.319720984 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.319765091 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.319792986 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.322251081 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.322266102 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.322398901 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.322555065 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.322567940 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.826673031 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.827150106 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.827173948 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.827639103 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.827645063 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.844974041 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.882082939 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.882157087 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.883276939 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.883290052 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.935575962 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.935734034 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.935782909 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.935882092 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.935882092 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.935903072 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.935913086 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.939678907 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.939776897 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.939843893 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.940466881 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.940499067 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.944144011 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.945182085 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.945208073 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.946171045 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.946183920 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.981085062 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.982269049 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.982306004 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.983623028 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.983633041 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.986900091 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.987535000 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.987549067 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.988261938 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.988267899 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.989485025 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.989511013 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.989552975 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.989553928 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.989594936 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.990118980 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.990137100 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.990149021 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.990154028 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.996650934 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.996684074 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:12.996795893 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.997853994 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:12.997869968 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.051592112 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.051665068 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.051723957 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.051877022 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.051907063 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.051925898 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.051935911 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.055071115 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.055119991 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.055206060 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.055468082 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.055480003 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.094911098 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.095009089 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.095062971 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.097384930 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.097470045 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.097507954 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.146370888 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.146370888 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.146400928 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.146413088 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.147919893 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.147924900 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.147944927 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.147950888 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.152800083 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.152841091 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.152909994 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.153811932 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.153822899 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.155162096 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.155201912 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.155287981 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.155538082 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.155564070 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.592108011 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.619285107 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.619368076 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.620060921 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.620080948 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.665730000 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.709222078 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.715353966 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.721769094 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.722007990 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.722095013 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.762121916 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.762603045 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.762610912 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.762667894 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.762672901 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.763206005 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.763211012 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.763389111 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.763394117 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.763540030 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.763540030 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.763578892 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.763605118 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.766412973 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.766494036 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.766578913 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.766777039 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.766813993 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.806368113 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.806718111 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.806782007 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.806797981 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.807163000 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.807178974 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.807698965 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.807703972 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.807775974 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.807780981 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.865243912 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.865398884 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.865463018 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.865530968 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.865547895 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.865560055 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.865565062 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.866684914 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.866863012 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.866959095 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.866982937 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.866982937 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.867000103 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.867008924 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.868496895 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868540049 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.868649006 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868657112 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.868668079 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868794918 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868812084 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.868819952 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868947983 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.868959904 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.913108110 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.913144112 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.913194895 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.913264036 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.913376093 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.913384914 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.913394928 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.913400888 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.914417028 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.914474964 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.914530039 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.914724112 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.914740086 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.914748907 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.914752960 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.917119026 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917152882 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917160034 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.917222023 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917232990 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.917304039 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917633057 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917646885 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:13.917727947 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:13.917768955 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.425906897 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.426407099 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.426439047 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.426863909 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.426872015 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.532723904 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.533226967 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.533251047 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.533684969 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.533689976 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.535195112 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.535259008 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.535355091 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.535558939 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.535558939 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.535573006 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.535582066 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.538181067 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.538218021 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.538338900 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.538634062 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.538645029 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.548151016 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.548552990 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.548564911 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.548943043 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.548948050 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.570578098 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.570872068 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.570902109 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.571229935 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.571238041 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.609129906 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.609468937 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.609539032 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.609837055 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.609852076 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.643381119 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.643567085 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.643624067 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.643789053 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.643804073 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.643877029 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.643884897 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.647277117 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.647325039 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.647478104 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.647674084 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.647691965 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.662273884 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.662431002 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.662484884 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.662508965 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.662518978 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.662530899 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.662534952 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.664589882 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.664629936 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.664752960 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.664905071 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.664916039 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.680099964 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.680125952 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.680172920 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.680228949 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.680350065 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.680358887 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.680368900 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.680373907 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.682940960 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.682965040 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.683195114 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.683330059 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.683340073 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.724320889 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.724339962 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.724412918 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.724426985 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.724494934 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.724613905 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.724656105 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.724684000 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.724699974 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.726702929 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.726793051 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:14.726886034 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.727030993 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:14.727083921 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.114233971 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.115268946 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.115268946 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.115339041 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.115425110 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.120508909 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.120899916 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.120929003 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.121304989 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.121313095 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.122255087 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.122576952 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.122638941 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.122962952 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.122976065 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.123742104 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.124027967 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.124042034 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.124358892 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.124368906 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.127111912 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.127404928 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.127423048 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.127727032 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.127732038 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.223890066 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.223922014 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.223975897 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.224041939 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.224260092 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.224287033 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.224303007 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.224308014 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.226969004 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.227014065 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.227112055 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.227310896 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.227328062 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.230937004 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.230983973 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231080055 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231093884 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231111050 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231112003 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231153011 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231173038 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231184959 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231261015 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231268883 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231313944 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231416941 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231446981 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231462955 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.231473923 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.231478930 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.233690023 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.233724117 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.233782053 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.233798981 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.233817101 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.233844995 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.233952045 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.233966112 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.234070063 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.234083891 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.234976053 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.235095978 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.235145092 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.235155106 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.235193014 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.235295057 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.235299110 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.235326052 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.235330105 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.237131119 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.237171888 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.237234116 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.237390995 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.237405062 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.238581896 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.238758087 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.238811970 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.238837004 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.238847971 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.238859892 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.238864899 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.240875959 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.240901947 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.240959883 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.241077900 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.241092920 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.888652086 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.889256001 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.889275074 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.889889002 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.889893055 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.890566111 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.890954971 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.890985966 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.891625881 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.891640902 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.898684025 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.899163008 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.899193048 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.899719954 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.899724960 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.920192003 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.920706034 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.920731068 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.921438932 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.921446085 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.937067032 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.937537909 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.937566996 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.938085079 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.938091040 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997628927 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997723103 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997771025 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.997790098 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997837067 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997876883 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.997961044 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.997978926 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:16.997987986 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:16.997993946 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.000219107 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.000643015 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.000701904 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.000709057 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.000742912 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.000821114 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.000844002 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.000857115 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.000864983 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.001240969 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.001279116 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.001426935 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.001696110 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.001713037 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.003274918 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.003324032 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.003422976 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.003642082 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.003659964 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.006547928 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.006706953 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.006757975 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.006804943 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.006819010 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.006833076 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.006838083 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.009130001 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.009156942 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.009212971 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.009352922 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.009361029 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.032457113 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.032625914 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.032685041 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.032807112 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.032814980 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.032825947 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.032830000 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.035917997 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.035939932 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.036007881 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.036206007 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.036211967 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.051645994 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.052514076 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.052557945 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.052596092 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.052608013 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.052619934 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.052624941 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.054812908 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.054852962 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.054933071 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.055058002 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.055075884 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.661309004 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.661818027 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.661834955 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.662286997 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.662292004 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.663981915 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.664483070 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.664506912 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.664880037 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.664885044 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.670079947 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.670420885 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.670444012 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.670799971 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.670804024 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.717752934 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.723689079 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.723696947 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.724412918 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.724416018 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.748014927 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.748399019 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.748430967 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.748848915 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.748857975 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.770441055 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.770589113 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.770622015 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.770631075 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.770667076 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.774120092 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.774183989 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.774440050 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.774629116 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.774647951 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.774682045 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.774687052 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.774768114 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.774785995 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.781965971 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.782027006 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.782072067 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.782090902 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.782116890 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.787966013 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.787966013 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.787971973 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.787981987 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.788579941 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.788619041 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.788667917 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.789856911 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.789890051 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.789932966 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.790236950 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.790251017 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.799417973 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.799432993 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.799480915 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.799599886 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.799617052 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.799830914 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.799839973 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.832005024 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.832063913 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.832709074 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.832967997 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.832977057 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.844947100 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.844966888 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.845011950 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.845298052 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.845304966 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.869556904 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.869582891 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.869632959 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.869654894 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.869730949 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.869975090 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.869975090 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.869992018 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.870002985 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.872565031 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.872608900 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:17.872673035 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.872782946 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:17.872792959 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.406296968 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.406785965 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.406819105 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.407249928 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.407254934 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.485816002 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.487411022 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.487411022 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.487438917 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.487454891 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.489907026 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.490312099 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.490329981 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.490712881 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.490719080 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.494379044 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.495172024 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.495208025 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.495923996 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.495929003 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.520056009 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.520203114 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.520263910 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.520379066 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.520400047 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.520411015 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.520416975 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.523166895 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.523262978 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.523411036 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.523523092 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.523545980 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.530141115 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.530462980 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.530489922 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.530853033 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.530864954 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.593556881 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.593636990 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.593785048 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.594849110 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.594849110 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.594867945 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.594877005 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.596199036 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.596467018 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.596556902 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.596601963 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.596700907 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.596733093 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.596733093 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.596733093 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.597439051 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.597457886 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.599196911 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.599241018 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.599539042 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.599790096 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.599805117 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.603097916 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.603157043 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.603255033 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.603293896 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.603308916 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.603319883 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.603323936 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.605655909 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.605676889 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.605720997 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.606108904 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.606117010 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.638292074 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.638381004 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.638503075 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.638540983 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.638541937 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.638559103 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.638571024 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.640774012 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.640822887 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.640894890 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.641092062 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.641103983 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:18.900646925 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:18.900686026 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.203418016 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.204057932 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.204077005 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.204509974 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.204514980 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.269391060 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.269946098 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.269973993 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.270395994 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.270401001 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.286183119 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.286881924 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.286892891 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.287404060 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.287408113 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312146902 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312213898 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312254906 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.312267065 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312277079 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312315941 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.312485933 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.312500954 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.312511921 CEST	49933	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.312516928 CEST	443	49933	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.313030005 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.313960075 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.313968897 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.314445019 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.314449072 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.315983057 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.316044092 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.316149950 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.316273928 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.316298962 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.318032026 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.318470001 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.318492889 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.319014072 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.319024086 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.379695892 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.379735947 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.379785061 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.379797935 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.379838943 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.380121946 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.380143881 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.380156994 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.380162954 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.383027077 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.383059978 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.383147955 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.383296013 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.383306026 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.398359060 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.398422956 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.398638010 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.398698092 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.398737907 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.398773909 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.398789883 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.401242971 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.401273012 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.401345968 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.401475906 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.401487112 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.428445101 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.428503990 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.428561926 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.428627968 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.428740978 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.428759098 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.428771973 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.428776979 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.431524992 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.431557894 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.431626081 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.431771040 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.431782961 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.433186054 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.433264017 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.433360100 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.433383942 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.433392048 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.433408022 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.433413029 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.435264111 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.435272932 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.435328007 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.435427904 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.435437918 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.911168098 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.911679983 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.911705971 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:19.912122011 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:19.912127972 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.019412041 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.019750118 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.019805908 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.019938946 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.019959927 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.019973040 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.019979000 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.022840977 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.022880077 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.023411989 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.023592949 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.023602962 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.041990042 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.042495012 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.042512894 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.042967081 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.042977095 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.057138920 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.057492971 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.057514906 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.057869911 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.057874918 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.082369089 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.082808971 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.082833052 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.083195925 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.083199978 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.127216101 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.127890110 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.127907991 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.128676891 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.128683090 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.156414032 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.156620979 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.156666040 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.156667948 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.156770945 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.156770945 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.156817913 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.156836033 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.159480095 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.159524918 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.159611940 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.159754992 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.159765959 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.167160988 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.167637110 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.167694092 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.167732000 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.167747974 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.167759895 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.167764902 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.169951916 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.169995070 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.170281887 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.170452118 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.170464039 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.191905022 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.191939116 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.191987038 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.192027092 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.192137003 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.192152977 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.192164898 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.192171097 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.194344997 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.194394112 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.194469929 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.194633007 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.194644928 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.243068933 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.243088961 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.243144035 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.243149042 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.243189096 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.243413925 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.243413925 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.243431091 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.243442059 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.246269941 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.246298075 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.246361971 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.246510983 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.246521950 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.675746918 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.676196098 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.676222086 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.676665068 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.676671028 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.785156012 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.785379887 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.785425901 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.785429001 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.785465002 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.785515070 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.785531998 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.785542965 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.785547972 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.788291931 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.788336992 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.788516045 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.788836002 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.788851023 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.823334932 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.823775053 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.823805094 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.824363947 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.824377060 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.852166891 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.852596998 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.852621078 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.852883101 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.853043079 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.853049040 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.853115082 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.853141069 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.853447914 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.853458881 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.905221939 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.905710936 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.905740976 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.906173944 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.906188965 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.932199001 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.932321072 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.932368040 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.932370901 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.932426929 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.932879925 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.932879925 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.932899952 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.932908058 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.936467886 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.936496973 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.936558008 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.936702967 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.936712980 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.962982893 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.963054895 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.963104010 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.963326931 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.963336945 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.963365078 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.963371992 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.966509104 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.966537952 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.966630936 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.966840029 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.966851950 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.967840910 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.967905045 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.967951059 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.968096018 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.968116999 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.968131065 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.968137026 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.971015930 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.971065044 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:20.971141100 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.971349955 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:20.971373081 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.020842075 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.020872116 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.020924091 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.020934105 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.020999908 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.021306992 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.021353960 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.021384954 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.021401882 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.024827957 CEST	49952	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.024882078 CEST	443	49952	13.107.253.45	192.168.2.4
Oct 7, 2024 08:59:21.025069952 CEST	49952	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.025069952 CEST	49952	443	192.168.2.4	13.107.253.45
Oct 7, 2024 08:59:21.025115013 CEST	443	49952	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 08:57:54.573612928 CEST	53	53867	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:54.594546080 CEST	53	51341	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:55.645188093 CEST	53	51957	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:56.357047081 CEST	61379	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:56.358293056 CEST	51254	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:56.559072971 CEST	53	51254	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:56.659495115 CEST	53	61379	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:57.283951998 CEST	64660	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:57.284276009 CEST	62384	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:57.291212082 CEST	53	62384	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:57.291349888 CEST	53	64660	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:57.391491890 CEST	53	53441	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:58.367185116 CEST	60692	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:58.367728949 CEST	53388	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:58.373835087 CEST	53	60692	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:58.374521017 CEST	53	53388	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:58.550602913 CEST	51437	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:58.551096916 CEST	60616	53	192.168.2.4	1.1.1.1
Oct 7, 2024 08:57:58.558038950 CEST	53	60616	1.1.1.1	192.168.2.4
Oct 7, 2024 08:57:58.558253050 CEST	53	51437	1.1.1.1	192.168.2.4
Oct 7, 2024 08:58:11.741223097 CEST	138	138	192.168.2.4	192.168.2.255
Oct 7, 2024 08:58:13.077179909 CEST	53	53095	1.1.1.1	192.168.2.4
Oct 7, 2024 08:58:32.395654917 CEST	53	61893	1.1.1.1	192.168.2.4
Oct 7, 2024 08:58:53.980564117 CEST	53	63620	1.1.1.1	192.168.2.4
Oct 7, 2024 08:58:54.395029068 CEST	53	63730	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 08:57:56.357047081 CEST	192.168.2.4	1.1.1.1	0x3ae9	Standard query (0)	logiamutusliber.com.ar	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:56.358293056 CEST	192.168.2.4	1.1.1.1	0xd266	Standard query (0)	logiamutusliber.com.ar	65	IN (0x0001)	false
Oct 7, 2024 08:57:57.283951998 CEST	192.168.2.4	1.1.1.1	0x3711	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:57.284276009 CEST	192.168.2.4	1.1.1.1	0x8625	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Oct 7, 2024 08:57:58.367185116 CEST	192.168.2.4	1.1.1.1	0xbd79	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:58.367728949 CEST	192.168.2.4	1.1.1.1	0x5f81	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 08:57:58.550602913 CEST	192.168.2.4	1.1.1.1	0xd594	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:58.551096916 CEST	192.168.2.4	1.1.1.1	0xb4d0	Standard query (0)	i.imgur.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 08:57:56.659495115 CEST	1.1.1.1	192.168.2.4	0x3ae9	No error (0)	logiamutusliber.com.ar		198.27.76.221	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:57.291212082 CEST	1.1.1.1	192.168.2.4	0x8625	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:57:57.291349888 CEST	1.1.1.1	192.168.2.4	0x3711	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:57:57.291349888 CEST	1.1.1.1	192.168.2.4	0x3711	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:57.291349888 CEST	1.1.1.1	192.168.2.4	0x3711	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:58.373835087 CEST	1.1.1.1	192.168.2.4	0xbd79	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:58.374521017 CEST	1.1.1.1	192.168.2.4	0x5f81	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 08:57:58.558038950 CEST	1.1.1.1	192.168.2.4	0xb4d0	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:57:58.558253050 CEST	1.1.1.1	192.168.2.4	0xd594	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:57:58.558253050 CEST	1.1.1.1	192.168.2.4	0xd594	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:57:58.558253050 CEST	1.1.1.1	192.168.2.4	0xd594	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:09.395618916 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:09.395618916 CEST	1.1.1.1	192.168.2.4	0x8ad4	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:11.991894960 CEST	1.1.1.1	192.168.2.4	0xcfcd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:11.991894960 CEST	1.1.1.1	192.168.2.4	0xcfcd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:24.525526047 CEST	1.1.1.1	192.168.2.4	0x7895	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:24.525526047 CEST	1.1.1.1	192.168.2.4	0x7895	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053318977 CEST	1.1.1.1	192.168.2.4	0x5c4e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053318977 CEST	1.1.1.1	192.168.2.4	0x5c4e	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053318977 CEST	1.1.1.1	192.168.2.4	0x5c4e	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053334951 CEST	1.1.1.1	192.168.2.4	0x4571	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053334951 CEST	1.1.1.1	192.168.2.4	0x4571	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053366899 CEST	1.1.1.1	192.168.2.4	0x4571	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:58:48.053366899 CEST	1.1.1.1	192.168.2.4	0x4571	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:59:07.003360033 CEST	1.1.1.1	192.168.2.4	0x365d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:59:07.003360033 CEST	1.1.1.1	192.168.2.4	0x365d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

logiamutusliber.com.ar

i.imgur.com

fs.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	198.27.76.221	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 08:57:56.665421963 CEST	450	OUT	GET /dan/gbsources HTTP/1.1 Host: logiamutusliber.com.ar Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 08:57:57.154073000 CEST	955	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 707 date: Mon, 07 Oct 2024 06:57:57 GMT server: LiteSpeed location: http://logiamutusliber.com.ar/dan/gbsources/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>
Oct 7, 2024 08:57:57.156936884 CEST	451	OUT	GET /dan/gbsources/ HTTP/1.1 Host: logiamutusliber.com.ar Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 08:57:57.266515970 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.3.11 content-type: text/html content-length: 1522 content-encoding: gzip vary: Accept-Encoding date: Mon, 07 Oct 2024 06:57:57 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 18 5d 6f db 36 f0 59 01 f2 1f 0e f4 b3 2d db a9 db c0 91 0c 6c 49 3a f4 69 01 da 75 d8 23 2d d1 16 17 49 d4 48 ca b1 3b ec 07 ed 6f ec 97 0d c7 0f 7d 38 72 9a 6e ed b6 02 b3 2c 89 22 ef 8e c7 e3 7d 32 ca 74 91 af a2 8c d1 74 15 15 4c 53 c8 b4 ae c6 ec 97 9a ef 62 72 2d 4a cd 4a 3d 7e 77 a8 18 81 c4 7e c5 44 b3 bd 0e 11 f1 0a 92 8c 4a c5 74 fc c0 cb 54 3c a8 f1 6c be 98 93 d5 f9 d9 f9 59 a4 b9 ce d9 ea bb 5c ac 69 0e 6f 45 2d 13 a6 a2 d0 f6 1a 00 a5 0f 39 5b 9d 9f d1 65 26 76 4c fe 9a 88 5c c8 e5 e8 f5 eb e9 74 3a bd 82 8d 28 f5 d8 c0 2c b9 a6 39 4f ae e0 b7 f3 b3 28 f4 68 e7 67 51 ce cb 7b 90 2c 8f 89 ca 84 d4 49 ad 81 27 a2 24 a0 0f 15 8b 09 2f e8 96 85 55 b9 25 90 49 b6 89 09 ae 4d 2d c3 90 4f 78 b1 ad e5 24 11 45 f8 e3 cd 4f 7c 5f bc 9c 20 98 65 3c 34 d2 40 16 ed 15 ad 45 7a 00 9c 2b 26 a3 c5 25 5e 04 28 7e fb af 98 10 d8 f5 01 0c a9 f3 b3 20 d2 74 9d 33 04 df 96 31 49 58 a9 99 b4 f3 04 91 46 c2 ab 48 cb 55 a4 53 c8 18 df 66 3a 26 64 15 85 3a c5 87 74 44 90 8d c0 [TRUNCATED] Data Ascii: ]o6Y-lI:iu#-IH;o}8rn,"}2ttLSbr-JJ=~w~DJtT<lY\ioE-9[e&vL\t:(,9O(hgQ{,I'$/U%IM-Ox$EO\|_ e<4@Ez+&%^(~ t31IXFHUSf:&d:tD`,<TgB"^lAdXRns-#Q(f=b;E{?4UZzkT<WMx>o5&[[Hc\|'ex@S{9NzMf64a1XLhfQ`$ j3on@q:*):a2\2[;zY2uy1c{d=oo Y@t&TBi4\kReUQ[$VQwY"vM5Z986@G5ku;P3T.D`rJKSIK+EEKS]gv@HGeUk(ib-oC^#\|1WU,/a"<?,=)-W[\<h2ir.k)KP")=._uMS^nf$jR(7WOT:$FnimF2xpf<~}a!=I+>;P_RB1iYvuTP}!Ak-6"[c7=\|
Oct 7, 2024 08:57:57.266550064 CEST	537	IN	Data Raw: 04 83 5b 4c e9 6c e0 35 0e 04 bc 94 dc 78 cf e9 39 a9 7f 01 5b 44 ca a7 ee 93 b6 d5 d8 a9 f7 a5 5f 99 99 5a 71 9e 10 6a 77 b0 db ee 18 be 5f 76 77 f8 54 fb 54 20 b1 b5 46 92 b1 e4 7e 2d f6 04 4c cb b8 e4 23 45 b3 84 87 94 ec 64 7e e7 50 de 6a 7a Data Ascii: [Ll5x9[D_Zqjw_vwTT F~-L#Ed~Pjz%KuG021uYw^\)~x^bl4e\|r6&M1ISq!>mn34Zdp\Lh*pQ{dvQ^IEhBz^q;{VY

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	199.232.192.193	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:57:58 UTC	587	OUT	GET /Ornos2v.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://logiamutusliber.com.ar/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:57:58 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11011 Content-Type: image/jpeg Last-Modified: Wed, 23 Feb 2022 17:19:02 GMT ETag: "23a1d047c679420619990a93a8679891" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Kw0CDLzFe4p4vEGKZqH-CxKloOocmHwOYvkuI-H0cMya9TRZ-y5oAQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1087820 Date: Mon, 07 Oct 2024 06:57:58 GMT X-Served-By: cache-iad-kiad7000081-IAD, cache-ewr-kewr1740072-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1728284278.266551,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: ff d8 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 4c 03 34 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 01 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 05 06 07 09 08 04 0a 03 01 02 ff c4 00 43 10 00 00 06 01 02 03 07 03 02 03 04 07 09 01 00 00 00 01 02 03 04 05 06 07 11 08 09 12 0a 13 17 21 55 94 d2 14 22 31 41 51 15 23 61 16 32 33 82 18 24 25 52 62 71 81 34 39 3a 42 72 Data Ascii: CCL4"C!U"1AQ#a23$%Rbq49:Br
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: a5 29 1b a3 6e a5 11 79 28 fc cc 01 b6 40 79 f7 5f 79 ac f0 df c2 e6 78 ac 5f 3f d6 8c 07 19 c8 9b 51 21 ea e9 36 68 54 88 c6 7f a3 a8 47 51 b5 fe 7d 86 e3 d3 0d 55 c6 75 af 08 83 92 e1 f9 05 3e 4f 8f 59 a3 bc 89 63 57 2d b9 51 a4 27 fe 17 10 66 93 db f0 65 be e4 7e 46 00 be 03 41 eb e7 34 be 1d 38 5c ce 17 8c ea 06 b3 69 fe 2d 90 b4 5f cd ae 99 6c df d4 c7 fe 8e 21 26 66 d9 f9 97 92 88 bc 86 da d2 ad 5e c5 75 d3 09 89 92 e1 79 1d 26 57 8f cf 2d e3 d8 d4 cd 6e 5c 67 7f 72 25 a0 cc b7 2d fc cb f2 5f a8 03 22 01 ac 78 9c e3 47 49 f8 31 c6 a3 5b ea a6 a0 62 f8 2c 19 ab 36 e2 aa d6 6a 5a 72 52 8b f2 4d 37 e6 b7 36 dc b7 e9 49 ed b9 6f f9 1a f7 40 79 bf f0 c7 c5 0e 5a d5 06 0d ad 98 1d dd e4 83 24 b3 00 e7 fd 2c 87 cc cf 62 26 d0 f1 20 d6 7f d1 3b 98 03 d2 00 Data Ascii: )ny(@y_yx_?Q!6hTGQ}Uu>OYcW-Q'fe~FA48\i-_l!&f^uy&W-n\gr%-_"xGI1[b,6jZrRM76Io@yZ$,b& ;
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: 2a 3f 33 33 2f 22 33 3d 80 19 6f 2d 3f fc 61 7a ef ff 00 b8 c9 7f fd 68 75 4b 99 9d 4c 8d 42 a5 89 8f e5 4a b1 f0 d9 c7 da 49 63 14 ae ef 77 a9 d6 66 7d 71 ea db 32 3d d9 8a 95 24 96 f2 cf 63 32 4e e6 68 42 14 a3 e5 6f 2d 22 df b6 17 af 1e 5f 87 f2 5f fa 79 b4 3b 33 af 78 bd c2 35 29 87 b0 b8 4a 9d a8 97 d1 17 0e 05 dd a3 46 f5 66 13 0b 62 27 e4 21 3b 6c 6e 2c f6 e9 6c 8f a9 d5 92 49 4a 26 d0 7b 70 de 20 a7 b3 71 7a fc f9 df 03 d3 7d a3 bd ff 00 4d f5 38 6f 0a 93 8d b4 db aa 6b fb b8 bf b6 b1 7c 49 39 47 38 2e 3e 16 b9 e5 a9 9a 1b 94 52 6b 01 d0 e3 11 68 6c b8 95 ba a7 43 33 a5 43 34 a3 17 d0 2c 6f bb e9 6d 96 17 b7 4b 6f f7 26 64 4e 9f de 7d 4b 5a 48 8d 64 a5 e8 ed 08 d4 49 fc 35 65 f2 6c 74 4f 2f b6 c6 34 27 4d ec 62 b9 9c e7 72 92 92 3d 40 b0 42 be e6 Data Ascii: *?33/"3=o-?azhuKLBJIcwf}q2=$c2NhBo-"__y;3x5)JFfb'!;ln,lIJ&{p qz}M8ok\|I9G8.>RkhlC3C4,omKo&dN}KZHdI5eltO/4'Mbr=@B
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: ea d5 f2 5c 96 a6 4c 33 42 5d 4a 52 44 84 9c 78 6d 2f a3 a5 25 bb 8d 92 95 be e6 43 d8 bc 8e f2 ca fc d3 94 6f 0f b3 2b 25 37 2e 33 78 6c 28 8a 5a 4c 8f a1 d6 52 6c ba 83 fd 8d 2e 21 49 32 fd c8 79 33 b6 2d a6 b3 b3 be 53 91 2d e0 a1 d7 d9 c3 73 6a eb 09 c4 da 7a 89 a6 5c 6a 44 6e a5 7e c4 4e 48 68 bf cc 40 0d 0f c8 8f 91 2f 0e 5c 40 72 fd ab d5 8d 78 8c c6 7d 9c ea ca 65 cf 5a ec ef 1c 64 ea 23 9b ee 36 d9 a3 a1 c4 a8 df 5f 41 ba a7 56 66 7b b8 45 b1 6c 7b eb 7e 53 6f da f2 79 ed 1a 65 7c 2f d1 64 b3 2d b4 97 50 5c 71 a8 91 e4 ca 4b c9 57 5c 1f ae 80 ff 00 db f6 fd 42 0b 76 14 a2 22 ea 25 1e e5 e4 92 2b bc a3 3b 37 ba 0d cc 03 97 86 9c 6a 94 8d 45 d4 f8 96 d9 0c 37 9b b7 87 57 6c c2 63 43 98 cc 87 5a 71 b4 a0 db 33 46 dd 04 7b 19 99 ec a2 3f c1 90 f6 77 Data Ascii: \L3B]JRDxm/%Co+%7.3xl(ZLRl.!I2y3-S-sjz\jDn~NHh@/\@rx}eZd#6_AVf{El{~Soye\|/d-P\qKW\Bv"%+;7jE7WlcCZq3F{?w
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: 3e 4f 07 89 a6 aa 5c 1a e1 de eb ad 37 e5 89 c8 dc c3 b3 b7 c7 1f 30 7d 4b c7 a9 b8 a5 e2 16 a6 d3 4d b1 59 1d 6d 2e 0c f7 26 c9 79 3b 92 54 b6 a3 f7 0d 34 4f ad bd cb bd 74 d4 a4 ee 7e 4a dc c8 fa 6b c6 4f 27 bd 3c e2 6b 95 ff 00 fa 30 d1 29 78 6e 37 4b 06 2b 58 d4 b6 91 f5 0a aa 93 14 fa d9 79 64 66 46 ef 52 ba fb cd cc 8d 64 eb 87 b9 28 c8 cb 77 68 a7 16 38 96 b9 61 17 b7 b5 d2 9b 8b 1b 19 52 8a cd 0a 9d 0a 77 d2 24 9b ef 7a cd c8 4f be ca 92 68 dc fe d7 0c cb a4 c8 c8 8c b6 18 b6 9c f3 08 c1 35 36 ba ce 5d 7a 66 1c 7a 64 b1 26 72 da 9d 5b 37 e8 e1 3a a3 4f d6 bb f4 b2 9d ee 99 6c cb 77 09 ce 97 5b 49 f5 29 b2 49 19 95 79 f0 eb 9f 5f 9d 13 7a 32 69 c5 a6 5f 3d bc da 5a a3 93 1c 2a 72 c4 e6 99 c1 2e 94 4c d1 0d 3a d4 ad 2f ac d3 85 cb 78 a0 dd bd 31 12 Data Ascii: >O\70}KMYm.&y;T4Ot~JkO'<k0)xn7K+XydfFRd(wh8aRw$zOh56]zfzd&r[7:Olw[I)Iy_z2i_=Z*r.L:/x1
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: b6 9c 7d fd f6 25 f7 6d b2 d2 18 6d c5 a4 89 3d f2 cd 6a 49 19 ec 9f d0 fa 1b cc cf 94 46 23 c7 7f 2e 04 68 0e 3c ec 6c 0e 26 32 dc 47 b1 07 58 63 aa 2d 53 f1 1b 53 6c 21 c4 17 dc a6 54 85 29 0b d8 fa be fe af 35 16 c7 b3 6a f8 f0 a6 b2 4c 77 57 85 67 d1 21 3f 1e ba c1 52 df 8d 0c 9a 62 04 f7 4d a8 b3 56 49 92 6b 26 d6 b2 51 74 12 4d e4 f4 a8 d4 d1 11 6e 32 3e 25 38 ae a1 e1 76 04 19 57 d5 f6 92 63 4e 4b ab ef d9 7a 1c 56 19 26 c8 8c d2 6e cb 90 c3 6a 75 44 66 69 65 b5 2d d5 92 16 69 41 92 4c cb 53 5c 3f bb 0c 6b e7 96 bc b1 bc 99 21 e2 fd b8 fc fe 74 e7 6b 9a 38 bf c3 af 2a 7e 6a 3a 49 a3 05 a0 75 5a bd 86 e1 fa 54 92 38 4d db 37 6c dc 99 15 d0 d6 a3 ef 1b 88 e2 58 fa b4 27 65 28 c9 1b a3 6d f6 4a 92 37 47 2d 8e cd b6 73 cb 2f 9b 05 5e a5 61 ba 91 12 c3 Data Ascii: }%mm=jIF#.h<l&2GXc-SSl!T)5jLwWg!?RbMVIk&QtMn2>%8vWcNKzV&njuDfie-iALS\?k!tk8*~j:IuZT8M7lX'e(mJ7G-s/^a
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: a7 a1 e5 9f 91 91 ee 49 f3 db 72 3b 80 00 d5 96 9c 27 54 39 6d 32 c2 a2 ff 00 27 c6 a7 bd 74 ed fc 57 ab 5d 8c 7f c3 65 3c c9 b5 24 da 43 cc b8 d9 a1 f2 33 52 d0 ea 5c 4f 59 9a d2 48 57 98 f9 9f e0 d3 1b 9f 7f 12 ca 6d b6 55 63 32 37 d0 9b 8e ca b0 27 5c 94 a8 8d cc 6d 2a 71 66 8e bd d6 53 5e 35 74 a9 3b 19 23 a3 a0 93 b1 ed c0 19 71 4d 70 bc b0 ed 97 4a 45 b7 6d f3 be f8 b3 44 c5 e0 22 8d aa 98 91 5e cc 33 89 2a ab 8d 5f 0e b9 ee f2 03 0a ad 66 0c 84 c8 8a db 48 66 22 1b d9 0e 27 f2 a4 29 4a 25 19 28 d4 44 9e 9a 93 f8 26 c5 ef 23 6f 69 69 93 5a 4f 75 9b 14 4a b0 76 53 4d 49 9a f4 c5 c5 52 e4 a8 da 69 09 43 ad 9c 38 e4 df 74 94 21 24 d9 7d 86 37 10 0d db f7 ef 9f 5d 79 e0 f4 44 a5 69 f2 ae d9 74 58 2e 4a d6 a6 23 89 69 22 29 31 8b 7a cb 9b fc 8b 32 fe 3a Data Ascii: Ir;'T9m2'tW]e<$C3R\OYHWmUc27'\mqfS^5t;#qMpJEmD"^3_fHf"')J%(D&#oiiZOuJvSMIRiC8t!$}7]yDitX.J#i")1z2:
2024-10-07 06:57:58 UTC	1371	IN	Data Raw: 8d 3d 8a c0 aa 2b 0c 81 92 aa a0 81 41 0a 53 52 5b 44 88 a9 82 f1 3f 1a 4a 54 4d ed df a1 d4 a5 5b 99 1b 67 d3 b1 a0 d2 66 47 f5 c4 e1 86 02 ec a2 d8 5a e4 d9 76 41 6b 1e 0d 94 05 cd b1 94 ca 96 f2 27 13 04 e1 f7 6d b4 86 9b e8 4c 66 c9 09 65 0d a0 be e5 29 2a 52 94 a3 d9 80 2c fc 56 a5 ad ff 00 ca ef ad e3 cf d1 12 3e 16 9c 74 ae ca 97 45 91 89 e0 3a 39 59 a7 57 6e 4f 82 fc f7 5e 76 9e be 90 c9 f5 a1 49 ee 61 f7 dd d2 bc 92 47 d6 7d fa fa 8f 7d 8f 64 ec 45 e7 be 58 00 35 29 39 37 29 66 cc c6 2a 2a 97 cd 00 00 0c 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: =+ASR[D?JTM[gfGZvAk'mLfe)R,V>tE:9YWnO^vIaG}}dEX5)97)f*
2024-10-07 06:57:58 UTC	43	IN	Data Raw: 1a 5f 64 d7 c4 7f 6a fc 2a 9a a2 62 24 44 a8 ac 8b 21 bd fa 1d 6a 2a 10 b4 ee 5b 1e c6 45 b9 79 19 97 fd 45 30 00 00 00 01 ff d9 Data Ascii: _djb$D!j[EyE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	199.232.192.193	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:57:58 UTC	587	OUT	GET /WDYixm6.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://logiamutusliber.com.ar/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:57:58 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1178 Content-Type: image/png Last-Modified: Wed, 23 Feb 2022 17:16:30 GMT ETag: "a887c3bbc4838e44c29468d28adff12f" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: viQzm9Gd9fO5edc5Vj7IHS8BF_tjOT8_YBAu0BEEd5Rjk-QSL8vD0w== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1685741 Date: Mon, 07 Oct 2024 06:57:58 GMT X-Served-By: cache-iad-kiad7000176-IAD, cache-ewr-kewr1740025-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 72, 0 X-Timer: S1728284279.958574,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-07 06:57:58 UTC	1178	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 1f 08 02 00 00 00 09 34 58 db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 44 49 44 41 54 48 4b cd 96 5f 48 53 61 18 c6 4f 17 5a 21 c2 08 ec 22 f2 46 bc 88 f2 c6 86 57 e5 85 5d 14 65 04 09 75 51 11 e1 4d 05 42 17 06 51 10 06 09 12 48 11 61 54 5e 44 61 17 52 0b 41 0a 92 28 2c f2 62 91 39 9d ab 74 e6 9f 36 e6 cc 36 ff cc e9 74 3b eb f7 f5 e6 e7 99 ce 3f 04 42 87 31 ce f9 f6 7d ef f3 3e ef fb 3c ef 99 91 5c e7 cb 58 e7 f8 c9 ff 09 20 91 48 84 9e b5 8c 35 b7 9a f1 c4 da 79 af c4 20 d2 fe 2d 78 b7 71 c6 3f 2a e1 7c 97 6f ba 0c 5b 57 46 3e eb 3c 86 5d 3d 81 16 67 74 22 ba 32 d8 b2 00 93 43 c3 9e fc bd 4e c3 08 5e ab 8b 27 93 81 7a 87 6b c3 f6 Data Ascii: PNGIHDR 4XsRGBgAMAaDIDATHK_HSaOZ!"FW]euQMBQHaT^DaRA(,b9t66t;?B1}><\X H5y -xq?*\|o[WF><]=gt"2CN^'zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	199.232.192.193	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:57:59 UTC	346	OUT	GET /Ornos2v.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:57:59 UTC	723	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11011 Content-Type: image/jpeg Last-Modified: Wed, 23 Feb 2022 17:19:02 GMT ETag: "23a1d047c679420619990a93a8679891" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: Kw0CDLzFe4p4vEGKZqH-CxKloOocmHwOYvkuI-H0cMya9TRZ-y5oAQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:57:59 GMT Age: 1087821 X-Served-By: cache-iad-kiad7000081-IAD, cache-ewr-kewr1740071-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 3, 1 X-Timer: S1728284279.092632,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: ff d8 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 4c 03 34 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 01 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 05 06 07 09 08 04 0a 03 01 02 ff c4 00 43 10 00 00 06 01 02 03 07 03 02 03 04 07 09 01 00 00 00 01 02 03 04 05 06 07 11 08 09 12 0a 13 17 21 55 94 d2 14 22 31 41 51 15 23 61 16 32 33 82 18 24 25 52 62 71 81 34 39 3a 42 72 Data Ascii: CCL4"C!U"1AQ#a23$%Rbq49:Br
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: a5 29 1b a3 6e a5 11 79 28 fc cc 01 b6 40 79 f7 5f 79 ac f0 df c2 e6 78 ac 5f 3f d6 8c 07 19 c8 9b 51 21 ea e9 36 68 54 88 c6 7f a3 a8 47 51 b5 fe 7d 86 e3 d3 0d 55 c6 75 af 08 83 92 e1 f9 05 3e 4f 8f 59 a3 bc 89 63 57 2d b9 51 a4 27 fe 17 10 66 93 db f0 65 be e4 7e 46 00 be 03 41 eb e7 34 be 1d 38 5c ce 17 8c ea 06 b3 69 fe 2d 90 b4 5f cd ae 99 6c df d4 c7 fe 8e 21 26 66 d9 f9 97 92 88 bc 86 da d2 ad 5e c5 75 d3 09 89 92 e1 79 1d 26 57 8f cf 2d e3 d8 d4 cd 6e 5c 67 7f 72 25 a0 cc b7 2d fc cb f2 5f a8 03 22 01 ac 78 9c e3 47 49 f8 31 c6 a3 5b ea a6 a0 62 f8 2c 19 ab 36 e2 aa d6 6a 5a 72 52 8b f2 4d 37 e6 b7 36 dc b7 e9 49 ed b9 6f f9 1a f7 40 79 bf f0 c7 c5 0e 5a d5 06 0d ad 98 1d dd e4 83 24 b3 00 e7 fd 2c 87 cc cf 62 26 d0 f1 20 d6 7f d1 3b 98 03 d2 00 Data Ascii: )ny(@y_yx_?Q!6hTGQ}Uu>OYcW-Q'fe~FA48\i-_l!&f^uy&W-n\gr%-_"xGI1[b,6jZrRM76Io@yZ$,b& ;
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: 2a 3f 33 33 2f 22 33 3d 80 19 6f 2d 3f fc 61 7a ef ff 00 b8 c9 7f fd 68 75 4b 99 9d 4c 8d 42 a5 89 8f e5 4a b1 f0 d9 c7 da 49 63 14 ae ef 77 a9 d6 66 7d 71 ea db 32 3d d9 8a 95 24 96 f2 cf 63 32 4e e6 68 42 14 a3 e5 6f 2d 22 df b6 17 af 1e 5f 87 f2 5f fa 79 b4 3b 33 af 78 bd c2 35 29 87 b0 b8 4a 9d a8 97 d1 17 0e 05 dd a3 46 f5 66 13 0b 62 27 e4 21 3b 6c 6e 2c f6 e9 6c 8f a9 d5 92 49 4a 26 d0 7b 70 de 20 a7 b3 71 7a fc f9 df 03 d3 7d a3 bd ff 00 4d f5 38 6f 0a 93 8d b4 db aa 6b fb b8 bf b6 b1 7c 49 39 47 38 2e 3e 16 b9 e5 a9 9a 1b 94 52 6b 01 d0 e3 11 68 6c b8 95 ba a7 43 33 a5 43 34 a3 17 d0 2c 6f bb e9 6d 96 17 b7 4b 6f f7 26 64 4e 9f de 7d 4b 5a 48 8d 64 a5 e8 ed 08 d4 49 fc 35 65 f2 6c 74 4f 2f b6 c6 34 27 4d ec 62 b9 9c e7 72 92 92 3d 40 b0 42 be e6 Data Ascii: *?33/"3=o-?azhuKLBJIcwf}q2=$c2NhBo-"__y;3x5)JFfb'!;ln,lIJ&{p qz}M8ok\|I9G8.>RkhlC3C4,omKo&dN}KZHdI5eltO/4'Mbr=@B
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: ea d5 f2 5c 96 a6 4c 33 42 5d 4a 52 44 84 9c 78 6d 2f a3 a5 25 bb 8d 92 95 be e6 43 d8 bc 8e f2 ca fc d3 94 6f 0f b3 2b 25 37 2e 33 78 6c 28 8a 5a 4c 8f a1 d6 52 6c ba 83 fd 8d 2e 21 49 32 fd c8 79 33 b6 2d a6 b3 b3 be 53 91 2d e0 a1 d7 d9 c3 73 6a eb 09 c4 da 7a 89 a6 5c 6a 44 6e a5 7e c4 4e 48 68 bf cc 40 0d 0f c8 8f 91 2f 0e 5c 40 72 fd ab d5 8d 78 8c c6 7d 9c ea ca 65 cf 5a ec ef 1c 64 ea 23 9b ee 36 d9 a3 a1 c4 a8 df 5f 41 ba a7 56 66 7b b8 45 b1 6c 7b eb 7e 53 6f da f2 79 ed 1a 65 7c 2f d1 64 b3 2d b4 97 50 5c 71 a8 91 e4 ca 4b c9 57 5c 1f ae 80 ff 00 db f6 fd 42 0b 76 14 a2 22 ea 25 1e e5 e4 92 2b bc a3 3b 37 ba 0d cc 03 97 86 9c 6a 94 8d 45 d4 f8 96 d9 0c 37 9b b7 87 57 6c c2 63 43 98 cc 87 5a 71 b4 a0 db 33 46 dd 04 7b 19 99 ec a2 3f c1 90 f6 77 Data Ascii: \L3B]JRDxm/%Co+%7.3xl(ZLRl.!I2y3-S-sjz\jDn~NHh@/\@rx}eZd#6_AVf{El{~Soye\|/d-P\qKW\Bv"%+;7jE7WlcCZq3F{?w
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: 3e 4f 07 89 a6 aa 5c 1a e1 de eb ad 37 e5 89 c8 dc c3 b3 b7 c7 1f 30 7d 4b c7 a9 b8 a5 e2 16 a6 d3 4d b1 59 1d 6d 2e 0c f7 26 c9 79 3b 92 54 b6 a3 f7 0d 34 4f ad bd cb bd 74 d4 a4 ee 7e 4a dc c8 fa 6b c6 4f 27 bd 3c e2 6b 95 ff 00 fa 30 d1 29 78 6e 37 4b 06 2b 58 d4 b6 91 f5 0a aa 93 14 fa d9 79 64 66 46 ef 52 ba fb cd cc 8d 64 eb 87 b9 28 c8 cb 77 68 a7 16 38 96 b9 61 17 b7 b5 d2 9b 8b 1b 19 52 8a cd 0a 9d 0a 77 d2 24 9b ef 7a cd c8 4f be ca 92 68 dc fe d7 0c cb a4 c8 c8 8c b6 18 b6 9c f3 08 c1 35 36 ba ce 5d 7a 66 1c 7a 64 b1 26 72 da 9d 5b 37 e8 e1 3a a3 4f d6 bb f4 b2 9d ee 99 6c cb 77 09 ce 97 5b 49 f5 29 b2 49 19 95 79 f0 eb 9f 5f 9d 13 7a 32 69 c5 a6 5f 3d bc da 5a a3 93 1c 2a 72 c4 e6 99 c1 2e 94 4c d1 0d 3a d4 ad 2f ac d3 85 cb 78 a0 dd bd 31 12 Data Ascii: >O\70}KMYm.&y;T4Ot~JkO'<k0)xn7K+XydfFRd(wh8aRw$zOh56]zfzd&r[7:Olw[I)Iy_z2i_=Z*r.L:/x1
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: b6 9c 7d fd f6 25 f7 6d b2 d2 18 6d c5 a4 89 3d f2 cd 6a 49 19 ec 9f d0 fa 1b cc cf 94 46 23 c7 7f 2e 04 68 0e 3c ec 6c 0e 26 32 dc 47 b1 07 58 63 aa 2d 53 f1 1b 53 6c 21 c4 17 dc a6 54 85 29 0b d8 fa be fe af 35 16 c7 b3 6a f8 f0 a6 b2 4c 77 57 85 67 d1 21 3f 1e ba c1 52 df 8d 0c 9a 62 04 f7 4d a8 b3 56 49 92 6b 26 d6 b2 51 74 12 4d e4 f4 a8 d4 d1 11 6e 32 3e 25 38 ae a1 e1 76 04 19 57 d5 f6 92 63 4e 4b ab ef d9 7a 1c 56 19 26 c8 8c d2 6e cb 90 c3 6a 75 44 66 69 65 b5 2d d5 92 16 69 41 92 4c cb 53 5c 3f bb 0c 6b e7 96 bc b1 bc 99 21 e2 fd b8 fc fe 74 e7 6b 9a 38 bf c3 af 2a 7e 6a 3a 49 a3 05 a0 75 5a bd 86 e1 fa 54 92 38 4d db 37 6c dc 99 15 d0 d6 a3 ef 1b 88 e2 58 fa b4 27 65 28 c9 1b a3 6d f6 4a 92 37 47 2d 8e cd b6 73 cb 2f 9b 05 5e a5 61 ba 91 12 c3 Data Ascii: }%mm=jIF#.h<l&2GXc-SSl!T)5jLwWg!?RbMVIk&QtMn2>%8vWcNKzV&njuDfie-iALS\?k!tk8*~j:IuZT8M7lX'e(mJ7G-s/^a
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: a7 a1 e5 9f 91 91 ee 49 f3 db 72 3b 80 00 d5 96 9c 27 54 39 6d 32 c2 a2 ff 00 27 c6 a7 bd 74 ed fc 57 ab 5d 8c 7f c3 65 3c c9 b5 24 da 43 cc b8 d9 a1 f2 33 52 d0 ea 5c 4f 59 9a d2 48 57 98 f9 9f e0 d3 1b 9f 7f 12 ca 6d b6 55 63 32 37 d0 9b 8e ca b0 27 5c 94 a8 8d cc 6d 2a 71 66 8e bd d6 53 5e 35 74 a9 3b 19 23 a3 a0 93 b1 ed c0 19 71 4d 70 bc b0 ed 97 4a 45 b7 6d f3 be f8 b3 44 c5 e0 22 8d aa 98 91 5e cc 33 89 2a ab 8d 5f 0e b9 ee f2 03 0a ad 66 0c 84 c8 8a db 48 66 22 1b d9 0e 27 f2 a4 29 4a 25 19 28 d4 44 9e 9a 93 f8 26 c5 ef 23 6f 69 69 93 5a 4f 75 9b 14 4a b0 76 53 4d 49 9a f4 c5 c5 52 e4 a8 da 69 09 43 ad 9c 38 e4 df 74 94 21 24 d9 7d 86 37 10 0d db f7 ef 9f 5d 79 e0 f4 44 a5 69 f2 ae d9 74 58 2e 4a d6 a6 23 89 69 22 29 31 8b 7a cb 9b fc 8b 32 fe 3a Data Ascii: Ir;'T9m2'tW]e<$C3R\OYHWmUc27'\mqfS^5t;#qMpJEmD"^3_fHf"')J%(D&#oiiZOuJvSMIRiC8t!$}7]yDitX.J#i")1z2:
2024-10-07 06:57:59 UTC	1371	IN	Data Raw: 8d 3d 8a c0 aa 2b 0c 81 92 aa a0 81 41 0a 53 52 5b 44 88 a9 82 f1 3f 1a 4a 54 4d ed df a1 d4 a5 5b 99 1b 67 d3 b1 a0 d2 66 47 f5 c4 e1 86 02 ec a2 d8 5a e4 d9 76 41 6b 1e 0d 94 05 cd b1 94 ca 96 f2 27 13 04 e1 f7 6d b4 86 9b e8 4c 66 c9 09 65 0d a0 be e5 29 2a 52 94 a3 d9 80 2c fc 56 a5 ad ff 00 ca ef ad e3 cf d1 12 3e 16 9c 74 ae ca 97 45 91 89 e0 3a 39 59 a7 57 6e 4f 82 fc f7 5e 76 9e be 90 c9 f5 a1 49 ee 61 f7 dd d2 bc 92 47 d6 7d fa fa 8f 7d 8f 64 ec 45 e7 be 58 00 35 29 39 37 29 66 cc c6 2a 2a 97 cd 00 00 0c 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: =+ASR[D?JTM[gfGZvAk'mLfe)R,V>tE:9YWnO^vIaG}}dEX5)97)f*
2024-10-07 06:57:59 UTC	43	IN	Data Raw: 1a 5f 64 d7 c4 7f 6a fc 2a 9a a2 62 24 44 a8 ac 8b 21 bd fa 1d 6a 2a 10 b4 ee 5b 1e c6 45 b9 79 19 97 fd 45 30 00 00 00 01 ff d9 Data Ascii: _djb$D!j[EyE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:57:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:58:00 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=208062 Date: Mon, 07 Oct 2024 06:58:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	199.232.192.193	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:00 UTC	346	OUT	GET /WDYixm6.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:58:00 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1178 Content-Type: image/png Last-Modified: Wed, 23 Feb 2022 17:16:30 GMT ETag: "a887c3bbc4838e44c29468d28adff12f" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: viQzm9Gd9fO5edc5Vj7IHS8BF_tjOT8_YBAu0BEEd5Rjk-QSL8vD0w== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:58:00 GMT Age: 1685742 X-Served-By: cache-iad-kiad7000176-IAD, cache-ewr-kewr1740055-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 72, 1 X-Timer: S1728284280.103829,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-07 06:58:00 UTC	1178	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 1f 08 02 00 00 00 09 34 58 db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 44 49 44 41 54 48 4b cd 96 5f 48 53 61 18 c6 4f 17 5a 21 c2 08 ec 22 f2 46 bc 88 f2 c6 86 57 e5 85 5d 14 65 04 09 75 51 11 e1 4d 05 42 17 06 51 10 06 09 12 48 11 61 54 5e 44 61 17 52 0b 41 0a 92 28 2c f2 62 91 39 9d ab 74 e6 9f 36 e6 cc 36 ff cc e9 74 3b eb f7 f5 e6 e7 99 ce 3f 04 42 87 31 ce f9 f6 7d ef f3 3e ef fb 3c ef 99 91 5c e7 cb 58 e7 f8 c9 ff 09 20 91 48 84 9e b5 8c 35 b7 9a f1 c4 da 79 af c4 20 d2 fe 2d 78 b7 71 c6 3f 2a e1 7c 97 6f ba 0c 5b 57 46 3e eb 3c 86 5d 3d 81 16 67 74 22 ba 32 d8 b2 00 93 43 c3 9e fc bd 4e c3 08 5e ab 8b 27 93 81 7a 87 6b c3 f6 Data Ascii: PNGIHDR 4XsRGBgAMAaDIDATHK_HSaOZ!"FW]euQMBQHaT^DaRA(,b9t66t;?B1}><\X H5y -xq?*\|o[WF><]=gt"2CN^'zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:58:01 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=207997 Date: Mon, 07 Oct 2024 06:58:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 06:58:01 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49756	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:48 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:48 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:48 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065848Z-r154656d9bc4v6bg39gwnbf5vn00000006d00000000024wx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:48 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 06:58:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-07 06:58:48 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-07 06:58:49 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:49 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:49 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 265a1445-001e-00a2-25c7-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065849Z-1767f7688dcmkqgxsuwcub9gd000000000sg00000000dh73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:49 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:49 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:49 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065849Z-r154656d9bcpkd87yvea8r1dfg0000000dqg0000000066ea x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:49 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:49 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: ec1acd5e-601e-00ab-3736-1666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065849Z-r154656d9bc4v6bg39gwnbf5vn00000006ag000000006d8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:49 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:49 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b4e56b29-201e-0000-2178-18a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065849Z-1767f7688dcdvjcfkw13t1btbs0000000rtg000000009krb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:49 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:49 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:49 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065849Z-r154656d9bc5qmxtyvgyzcay0c0000000e60000000005xzv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:49 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:50 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:50 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065850Z-1767f7688dcjgr4ssr2c6t2x2s0000000rz00000000048rh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:50 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:50 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:50 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 7e689a47-601e-0002-7978-18a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065850Z-1767f7688dcdss7lwsep0egpxs0000000rpg00000000228t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:50 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49763	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:50 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065850Z-r154656d9bcvjnbgheqhz2uek80000000rsg000000006wa6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:50 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065850Z-1767f7688dcnlss9sm3w9wbbbn00000003y000000000bpy9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49764	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:50 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065850Z-r154656d9bcjpgqtzd4z33r5yn0000000e40000000008mgn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:51 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065851Z-1767f7688dc2kzqgyrtc6e2gp40000000rgg000000009a9b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:51 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:51 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 53b222f3-a01e-0098-419e-158556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065851Z-r154656d9bcjpgqtzd4z33r5yn0000000e3000000000b10a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49771	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:51 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065851Z-1767f7688dc5plpppuk35q59aw0000000rrg000000000z41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:51 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: cc223d3c-501e-008f-0ec7-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065851Z-r154656d9bc8glqfu2duqg0z1w00000001a0000000003dqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:51 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:51 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065851Z-1767f7688dcqrzlg5y6mnvesus0000000130000000004sp3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:51 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:52 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 5e74a9a8-b01e-003d-569e-15d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065852Z-1767f7688dck2l7961u6s0hrtn0000000rz0000000000d8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:52 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065852Z-r154656d9bcc2bdtn1pd2qfd4c0000000rmg00000000a8wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:52 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: dae66c3e-d01e-0066-08a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065852Z-1767f7688dctps2t8qk28fz8yg0000000rn0000000006wrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:52 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:52 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 77844cee-a01e-0032-35c7-171949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065852Z-r154656d9bcpkd87yvea8r1dfg0000000dug000000000pu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:52 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:52 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:52 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8abcb726-301e-001f-1b78-18aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065852Z-r154656d9bcclz9cswng83z0t00000000a8g000000007nat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:52 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:53 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065853Z-r154656d9bcvjnbgheqhz2uek80000000ru00000000043wn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:53 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065853Z-1767f7688dc7bfz42qn9t7yq500000000rvg000000000kdu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:53 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065853Z-r154656d9bcpkd87yvea8r1dfg0000000du000000000194a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:53 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: a818c6dc-b01e-005c-0236-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065853Z-r154656d9bc4v6bg39gwnbf5vn000000067000000000bxk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:53 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:53 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: bc3bb15e-601e-003d-16f8-176f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065853Z-r154656d9bc8glqfu2duqg0z1w00000001b0000000002rr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: e44feb8c-a01e-0084-742d-169ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-r154656d9bclprr71vn2nvcemn0000000rpg000000009b4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-1767f7688dcmkqgxsuwcub9gd000000000sg00000000dh8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 5e6d03be-001e-0014-0a36-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-r154656d9bclhnqxthdkb0ps8000000007hg00000000bz5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 07aac232-401e-0083-10c7-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-1767f7688dc6trhkx0ckh4u3qn0000000s3g0000000001k0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: c50e19a0-201e-003f-7304-186d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-r154656d9bctbqfcgmyvqx3k100000000e6g0000000039f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-r154656d9bcqqgssyv95384a1c0000000rpg000000007fx7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-1767f7688dc88qkvtwr7dy4vdn0000000a000000000082hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-r154656d9bczbzfnyr5sz58vdw0000000e2g00000000ct34 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-1767f7688dccbx4fmf9wh4mm3c0000000rgg000000000z37 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:54 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:54 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf725111-501e-00a0-7c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065854Z-1767f7688dcr9sxxmettbmaaq40000000rz0000000000f2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:55 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:55 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065855Z-1767f7688dc7bfz42qn9t7yq500000000rtg0000000037zc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:55 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:55 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065855Z-r154656d9bc2dpb46dmu3uezks0000000e7g000000004efs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 70979e43-c01e-00a1-459c-157e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065855Z-1767f7688dc5kg9bwc8fvfnfb40000000rz0000000000n4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:55 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 4700277e-801e-008f-589e-152c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065855Z-r154656d9bcc4snr2sy7ntt13c0000000azg00000000er9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:55 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065855Z-1767f7688dc5plpppuk35q59aw0000000rpg000000003vhw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:55 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:56 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:56 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: cbb781ac-501e-0047-14a6-15ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065856Z-1767f7688dc4zx8hzkgqpgqkb400000009d0000000008z3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:56 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:56 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065856Z-r154656d9bckpfgl7fe14swubc0000000e6g00000000722g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:56 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:56 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ba19d68d-701e-0032-3e7e-18a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065856Z-r154656d9bc4v6bg39gwnbf5vn000000069g0000000076sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:56 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:56 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:56 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 4b3baa61-c01e-00ad-4e9e-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065856Z-r154656d9bcfd2bs2ymcm7xz980000000e700000000049qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:56 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:56 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 85e8bebc-601e-0032-1873-16eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065856Z-1767f7688dcp6rq9vksdbz5r100000000rhg00000000bmw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:56 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-r154656d9bcdp2lt7d5tpscfcn0000000ryg0000000003wx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:57 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc687b4d-101e-0079-45b6-155913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-r154656d9bcgk58qzsfr5pfzg40000000rq0000000009n1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-1767f7688dcvlhnc8mxy0v1nqw00000002p000000000a54s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 3883747d-501e-008c-279e-15cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-r154656d9bcp2td5zh846myygg0000000rrg000000006t3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4d501e36-901e-0029-1978-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-1767f7688dc5smv9fdkth3nru00000000rq000000000736w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:57 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 26123472-e01e-0051-13e2-1784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065857Z-1767f7688dcdvjcfkw13t1btbs0000000rrg00000000dkpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-1767f7688dcqrzlg5y6mnvesus0000000150000000001rh9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-1767f7688dcjgr4ssr2c6t2x2s0000000rwg000000008fz1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-r154656d9bcwbfnhhnwdxge6u000000005yg00000000af2q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-r154656d9bc7mtk716cm75thbs0000000re000000000944d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 53cf1937-f01e-0096-0fc7-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-1767f7688dcvp2wzdxa8717z300000000480000000006r6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 38660718-101e-000b-6724-185e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-r154656d9bczbzfnyr5sz58vdw0000000e2g00000000ct3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-r154656d9bczmvnbrzm0xmzrs40000000e70000000006a44 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: bf719889-501e-00a0-2c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-1767f7688dcqrzlg5y6mnvesus0000000130000000004svu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:58 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:58 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:58 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065858Z-1767f7688dc97m2se6u6hv466400000007mg0000000007ve x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:58 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:59 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:59 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065859Z-r154656d9bc2dpb46dmu3uezks0000000e80000000003tys x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:59 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1d80fa4c-901e-0083-607e-18bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065859Z-1767f7688dcp6rq9vksdbz5r100000000rhg00000000bmwx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:59 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 6ff3ba62-001e-0082-1536-165880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065859Z-r154656d9bclhnqxthdkb0ps8000000007s0000000001sg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:58:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:59 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:59 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: dc79791b-701e-0053-72c7-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065859Z-1767f7688dc5plpppuk35q59aw0000000rgg00000000da2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:58:59 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:58:59 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:58:59 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e1dbe94c-b01e-0021-72a4-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065859Z-r154656d9bczbzfnyr5sz58vdw0000000e4g000000008b1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:58:59 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:00 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:00 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: a0476a89-101e-0028-4bc7-178f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065900Z-r154656d9bcjfw87mb0kw1h2480000000e1000000000ay30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:00 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:00 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:00 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 360ff137-701e-0098-1c78-18395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065900Z-1767f7688dczvnhxbpcveghk5g0000000b6g000000005z99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:00 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:00 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:00 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:00 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 801b5ab8-801e-00ac-3319-18fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065900Z-r154656d9bczbzfnyr5sz58vdw0000000e5000000000848p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:00 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:00 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:00 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 2c636da2-401e-0047-0afb-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065900Z-r154656d9bcfd2bs2ymcm7xz980000000e9g000000001406 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:00 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:00 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065900Z-1767f7688dcvp2wzdxa8717z300000000480000000006r79 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:01 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:01 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065901Z-1767f7688dcsjpdx60gbb8v42g0000000b2g000000003adm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:01 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:01 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:01 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ea18a89c-b01e-001e-2d22-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065901Z-r154656d9bckpfgl7fe14swubc0000000e9g000000002kv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:01 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:01 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:01 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065901Z-r154656d9bcc2bdtn1pd2qfd4c0000000rqg000000005r8p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:01 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:01 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 851bd0ea-b01e-0001-2cc7-1746e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065901Z-1767f7688dc9hz5543dfnckp1w0000000g100000000017pz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:01 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:01 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065901Z-r154656d9bc5gm9nqxzv5c87e8000000054g000000009pdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:02 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3f7faba8-401e-0016-01a4-1553e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-1767f7688dc9s2cg0vz2a9g5ms00000000w000000000ax37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:02 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a74b23e2-801e-0035-21c7-17752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-r154656d9bc5qmxtyvgyzcay0c0000000e2000000000cza9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:02 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:02 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 8a28721d-501e-008f-3e9c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-r154656d9bckpfgl7fe14swubc0000000e5g000000008ss8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:02 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-r154656d9bcgk58qzsfr5pfzg40000000rw0000000000m56 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:02 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ef3d2b9b-501e-008f-674f-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-1767f7688dc2kzqgyrtc6e2gp40000000rfg00000000b0m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:02 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-1767f7688dcxs7gvbd5dcgxeys0000000rf0000000005430 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:02 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7b1dd74b-e01e-0085-7ca6-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065902Z-r154656d9bclprr71vn2nvcemn0000000rs0000000005xfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:02 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-r154656d9bclprr71vn2nvcemn0000000rq0000000008yus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-r154656d9bc8glqfu2duqg0z1w000000015g00000000by98 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3acf1156-e01e-0052-60c7-17d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-1767f7688dc4gvn6w3bs6a6k900000000rv0000000004um1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 36849978-001e-000b-119c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-r154656d9bcv7txsqsufsswrks0000000e6g000000003gsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-1767f7688dc4gvn6w3bs6a6k900000000ry00000000008tq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-r154656d9bcwd5vj3zknz7qfhc00000006wg000000006r2m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:03 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07aacdb1-401e-0083-73c7-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065903Z-1767f7688dcdplk6tmg02e519n0000000rxg000000004g2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:04 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:04 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:04 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065904Z-1767f7688dcnlss9sm3w9wbbbn000000040g000000006hy6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:04 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:04 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:04 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065904Z-1767f7688dc88qkvtwr7dy4vdn00000009z000000000afq5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:04 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:04 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:04 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065904Z-r154656d9bc8glqfu2duqg0z1w000000018000000000804d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:04 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:04 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:04 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 18b29d22-e01e-0085-0978-18c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065904Z-1767f7688dcp6rq9vksdbz5r100000000rhg00000000bmyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:04 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:04 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:04 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065904Z-r154656d9bcwd5vj3zknz7qfhc00000006zg0000000024u9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-r154656d9bcc4snr2sy7ntt13c0000000b300000000068eh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dae695f2-d01e-0066-14a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-r154656d9bc8glqfu2duqg0z1w000000017g000000007x9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-1767f7688dc4gvn6w3bs6a6k900000000ru0000000007wvp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-r154656d9bc8glqfu2duqg0z1w00000001b0000000002s1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2fb43ddb-b01e-0070-339e-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-1767f7688dck2l7961u6s0hrtn0000000rz0000000000ddg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:05 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 740c05bf-801e-008c-4478-187130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065905Z-1767f7688dcvp2wzdxa8717z30000000046000000000b006 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-r154656d9bc7mtk716cm75thbs0000000rn00000000000g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-1767f7688dcsjpdx60gbb8v42g0000000axg00000000bvw6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d5bde9b-e01e-0071-239c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-r154656d9bcn4d55dey6ma44b00000000e5g000000008fgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-1767f7688dc5plpppuk35q59aw0000000rqg000000002wkx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 6e08d1a6-401e-0067-5736-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-r154656d9bcp2td5zh846myygg0000000rn000000000d55w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a1759df9-d01e-007a-08c7-17f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-1767f7688dc9hz5543dfnckp1w0000000fy0000000006cpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:06 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:07 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0964379-001e-0049-4678-185bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-1767f7688dccbx4fmf9wh4mm3c0000000rfg000000002xxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:07 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:06 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:07 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:06 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065906Z-r154656d9bcpnqc46yk454phh800000003dg000000004xht x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:07 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:07 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 0ac1196c-201e-00aa-6778-183928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065907Z-1767f7688dck2l7961u6s0hrtn0000000rxg000000002yf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:07 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:07 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065907Z-1767f7688dc7bfz42qn9t7yq500000000ru0000000002v78 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:07 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065907Z-r154656d9bc2dpb46dmu3uezks0000000e9g0000000016q8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:07 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c27d0d21-301e-0051-279e-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-r154656d9bcc4snr2sy7ntt13c0000000b1g000000008vw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:07 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-1767f7688dc5kg9bwc8fvfnfb40000000rwg000000004bvx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: db922a57-b01e-001e-0e73-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-1767f7688dc97m2se6u6hv466400000007eg000000008fx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-r154656d9bcclz9cswng83z0t00000000aag000000003sq3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: a31aaca5-901e-0083-7a04-18bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-r154656d9bcc4snr2sy7ntt13c0000000b4g000000003znw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 087215ec-201e-0085-7478-1834e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-1767f7688dc9s2cg0vz2a9g5ms0000000100000000004hx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:08 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3b1bff85-e01e-0052-0be7-17d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065908Z-r154656d9bcc2bdtn1pd2qfd4c0000000rt0000000001m04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:08 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:08 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 26cf0b74-601e-003e-0d78-183248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-1767f7688dc97m2se6u6hv466400000007k0000000002w1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: d94163bc-601e-0084-55c7-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-1767f7688dcjgr4ssr2c6t2x2s0000000rxg000000007ptu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: d62768f7-901e-007b-4578-18ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-1767f7688dc4gvn6w3bs6a6k900000000rr000000000b93p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cc2250c5-501e-008f-2ac7-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-r154656d9bcdp2lt7d5tpscfcn0000000ru00000000068ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-r154656d9bcv7txsqsufsswrks0000000e2000000000ahd8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 90bcc401-701e-006f-76a4-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-r154656d9bcvjnbgheqhz2uek80000000rrg000000008am2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:09 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:09 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:09 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 56c891cb-f01e-0085-428c-1588ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065909Z-1767f7688dcr9sxxmettbmaaq40000000rwg000000004rm8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:09 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:10 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:10 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:10 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 06e88621-201e-0051-35a6-157340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065910Z-r154656d9bcc4snr2sy7ntt13c0000000b40000000005acg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:10 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:10 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:10 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:10 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cce39220-001e-005a-519c-15c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065910Z-1767f7688dc9s2cg0vz2a9g5ms00000000wg000000009nx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:10 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:10 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:10 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:10 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2d26e6ec-001e-0066-1e78-18561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065910Z-1767f7688dcqrzlg5y6mnvesus00000001400000000030kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:10 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:10 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:11 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:11 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: be019a9f-401e-0035-518c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065911Z-1767f7688dcvp2wzdxa8717z3000000004a0000000003eku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:11 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:10 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:11 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4ec80adc-b01e-0098-309c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065911Z-r154656d9bczmvnbrzm0xmzrs40000000eag000000001bck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:11 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:11 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:11 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 3303e14a-901e-005b-7b78-182005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065911Z-1767f7688dc2kzqgyrtc6e2gp40000000rhg0000000086pq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:11 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:11 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:11 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: cd35b86e-901e-007b-4e19-18ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065911Z-r154656d9bcp2td5zh846myygg0000000rrg000000006t8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:11 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:11 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:11 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b0a4db7-c01e-00ad-2d8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065911Z-r154656d9bcx62tnuqgh46euy400000007sg000000004kcf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:11 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:11 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4b0a4edd-c01e-00ad-438c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-1767f7688dc4gvn6w3bs6a6k900000000rt000000000929r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: fba86ca6-e01e-00aa-5200-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-1767f7688dcdvjcfkw13t1btbs0000000rw00000000054q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a218e36-401e-00a3-268c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-r154656d9bcqqgssyv95384a1c0000000rng00000000aqgq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 0e45fb44-301e-005d-1e9c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-r154656d9bcn4d55dey6ma44b00000000e800000000049cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f924b4a2-b01e-0002-729c-151b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-1767f7688dcjgr4ssr2c6t2x2s0000000rwg000000008g9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: b9a1a970-401e-0078-528c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-r154656d9bc6kzfwvnn9vvz3c4000000058g000000009ws2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:12 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 2ac0cc84-b01e-003e-01b6-158e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-r154656d9bcjfw87mb0kw1h2480000000e7g000000000qu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 06:59:12 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:13 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: b9d89a70-001e-008d-3b8c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-1767f7688dczvnhxbpcveghk5g0000000b70000000004zm9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:13 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:12 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 4f10e0ef-e01e-0085-118c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065912Z-r154656d9bcwd5vj3zknz7qfhc000000070g000000000abw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:13 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:59:12 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:59:13 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:59:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 801e3e61-b01e-0021-2d8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T065913Z-1767f7688dcp6rq9vksdbz5r100000000rs0000000000pap x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:59:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1216, Parent PID: 5752

General

Target ID:	0
Start time:	02:57:50
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4092, Parent PID: 1216

General

Target ID:	2
Start time:	02:57:52
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2300,i,1858375456544592284,11987062658215177213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 5752

General

Target ID:	3
Start time:	02:57:55
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://logiamutusliber.com.ar/dan/gbsources"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly