Edit tour

Windows Analysis Report
https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97

Overview

General Information

Sample URL:	https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97
Analysis ID:	1528798
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,15333744745124969845,5568448262312495137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access

HTTP Parser: omuxika.info@arag.es

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52822 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:52766 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Public/EviNotice/Delivery/Start?deliveryId=019247e7-307b-4d79-bf99-a300cd1f6d97 HTTP/1.1Host: evicertia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Public/EviNotice/Custody?uniqueId=019247e7-307b-446a-ad9c-9727c03931e7 HTTP/1.1Host: evicertia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access HTTP/1.1Host: evicertia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/AccessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/AccessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Master/Logo HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/AccessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Content/Fonts/open-sans-latin-500-normal.woff2 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://evicertia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Content/Fonts/open-sans-latin-600-normal.woff2 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://evicertia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1 HTTP/1.1Host: evicertia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Master/Logo HTTP/1.1Host: evicertia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Content/Fonts/open-sans-latin-400-normal.woff2 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://evicertia.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Content/Images/favicon.ico?v=24259.16716.14.14 HTTP/1.1Host: evicertia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/AccessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /Content/Images/favicon.ico?v=24259.16716.14.14 HTTP/1.1Host: evicertia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: evicertia.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa

Source: chromecache_56.2.dr, chromecache_59.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_56.2.dr, chromecache_59.2.dr	String found in binary or memory: https://github.com/bigskysoftware/htmx/pull/2159
Source: chromecache_56.2.dr, chromecache_59.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_56.2.dr, chromecache_59.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52915
Source: unknown	Network traffic detected: HTTP traffic on port 52907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52918
Source: unknown	Network traffic detected: HTTP traffic on port 52851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 52874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52928
Source: unknown	Network traffic detected: HTTP traffic on port 52954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52926
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52920
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52809
Source: unknown	Network traffic detected: HTTP traffic on port 52839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52932
Source: unknown	Network traffic detected: HTTP traffic on port 52783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52933
Source: unknown	Network traffic detected: HTTP traffic on port 52815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52817
Source: unknown	Network traffic detected: HTTP traffic on port 52840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52939
Source: unknown	Network traffic detected: HTTP traffic on port 52953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52937
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52810
Source: unknown	Network traffic detected: HTTP traffic on port 52863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52931
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52826
Source: unknown	Network traffic detected: HTTP traffic on port 52931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52948
Source: unknown	Network traffic detected: HTTP traffic on port 52885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52940
Source: unknown	Network traffic detected: HTTP traffic on port 52772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 52782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52906
Source: unknown	Network traffic detected: HTTP traffic on port 52929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52903
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52904
Source: unknown	Network traffic detected: HTTP traffic on port 52864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 52875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52877
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52878
Source: unknown	Network traffic detected: HTTP traffic on port 52779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52872
Source: unknown	Network traffic detected: HTTP traffic on port 52791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52873
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52874
Source: unknown	Network traffic detected: HTTP traffic on port 52807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52884
Source: unknown	Network traffic detected: HTTP traffic on port 52883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52890
Source: unknown	Network traffic detected: HTTP traffic on port 52934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52772
Source: unknown	Network traffic detected: HTTP traffic on port 52848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52775
Source: unknown	Network traffic detected: HTTP traffic on port 52882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52896
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52780
Source: unknown	Network traffic detected: HTTP traffic on port 52933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52789
Source: unknown	Network traffic detected: HTTP traffic on port 52900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52783
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52781
Source: unknown	Network traffic detected: HTTP traffic on port 52860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52786
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52790
Source: unknown	Network traffic detected: HTTP traffic on port 52911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52791
Source: unknown	Network traffic detected: HTTP traffic on port 52837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52954
Source: unknown	Network traffic detected: HTTP traffic on port 52817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52959
Source: unknown	Network traffic detected: HTTP traffic on port 52861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52953
Source: unknown	Network traffic detected: HTTP traffic on port 52884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52849
Source: unknown	Network traffic detected: HTTP traffic on port 52778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52961
Source: unknown	Network traffic detected: HTTP traffic on port 52849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52841
Source: unknown	Network traffic detected: HTTP traffic on port 52789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52852
Source: unknown	Network traffic detected: HTTP traffic on port 52805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52866
Source: unknown	Network traffic detected: HTTP traffic on port 52816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52867
Source: unknown	Network traffic detected: HTTP traffic on port 52790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52861
Source: unknown	Network traffic detected: HTTP traffic on port 52921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52863
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52795
Source: unknown	Network traffic detected: HTTP traffic on port 52775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52799
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52797
Source: unknown	Network traffic detected: HTTP traffic on port 52912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52822 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/21@8/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,15333744745124969845,5568448262312495137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,15333744745124969845,5568448262312495137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
evicertia.com	94.103.116.70	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97	false	unknown
https://evicertia.com/Content/Fonts/open-sans-latin-500-normal.woff2	false	unknown
https://evicertia.com/Content/Images/favicon.ico?v=24259.16716.14.14	false	unknown
https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access	false	unknown
https://evicertia.com/Public/EviNotice/Custody?uniqueId=019247e7-307b-446a-ad9c-9727c03931e7	false	unknown
https://evicertia.com/Master/Logo	false	unknown
https://evicertia.com/Content/Fonts/open-sans-latin-600-normal.woff2	false	unknown
https://evicertia.com/Content/Fonts/open-sans-latin-400-normal.woff2	false	unknown
https://evicertia.com/Public/EviNotice/Delivery/Start?deliveryId=019247e7-307b-4d79-bf99-a300cd1f6d97	false	unknown
https://evicertia.com/bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/bigskysoftware/htmx/pull/2159	chromecache_56.2.dr, chromecache_59.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_56.2.dr, chromecache_59.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_56.2.dr, chromecache_59.2.dr	false	0%, Virustotal, Browse	unknown
https://getbootstrap.com/)	chromecache_56.2.dr, chromecache_59.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
94.103.116.70	evicertia.com	Spain	209674	EVICERTIAES	false

Private

IP
192.168.2.4
192.168.2.5
192.168.2.15

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528798
Start date and time:	2024-10-08 10:02:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/21@8/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 74.125.206.84, 142.250.186.142, 34.104.35.123, 172.217.16.138, 142.250.181.234, 142.250.185.202, 216.58.212.138, 142.250.74.202, 142.250.186.74, 216.58.206.42, 216.58.212.170, 142.250.185.234, 142.250.185.74, 142.250.184.202, 142.250.185.170, 142.250.185.138, 142.250.185.106, 142.250.186.42, 142.250.184.234, 52.149.20.212, 2.19.126.163, 2.19.126.137, 52.165.164.15, 192.229.221.95, 13.85.23.206, 172.202.163.200, 4.245.163.56, 142.250.186.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Model: jbxai	{ "brand":["eVicertia"], "contains_trigger_text":true, "trigger_text":"Message under custody", "prominent_button_name":"Continue", "text_input_field_labels":["UserResponse"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"In order to access the events and affidavits of the operation, Allianz Compaa de Seguros y Reaseguros S.A. has requested that you verify your identity by answering the following question: Enter the email address of the recipient of the message", "has_visible_qrcode":false}

Input

Output

URL: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Model: jbxai

{
"brand":["eVicertia"],
"contains_trigger_text":true,
"trigger_text":"Message under custody",
"prominent_button_name":"Continue",
"text_input_field_labels":["UserResponse"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"text":"In order to access the events and affidavits of the operation,
 Allianz Compaa de Seguros y Reaseguros S.A. has requested that you verify your identity by answering the following question: Enter the email address of the recipient of the message",
"has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47335)
Category:	downloaded
Size (bytes):	260406
Entropy (8bit):	5.078435053619696
Encrypted:	false
SSDEEP:	3072:JnQ9CfStjrR8yRqQCrmUVCXzfhTP0nSczUl:JnQ9CfStJ8k6rmUVCXzfhTP0nSczUl
MD5:	DBA49D48E500B8D671140E1ED586A0D7
SHA1:	0C9ABF9160E3BBAB65A4DB962F0EBDE3B70DE35B
SHA-256:	3B837DAB6E3FBB63C2B5CB4EDBCB9590296AE1B0477764159A47E9463EC1DCC3
SHA-512:	352911A93027FBF5EA700F7BCEC1D65C529589E885AFFA07D67D18C61F778A99B16F8013A3BD1841545217811353F634D96EDBB422AEE2C2C9EE4DB82F0AF927
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1
Preview:	@font-face{font-family:"Open Sans";font-style:italic;font-display:swap;font-weight:300;unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;src:url("/Content/Fonts/open-sans-latin-300-italic.woff2") format("woff2"),url("/Content/Fonts/open-sans-latin-300-italic.woff") format("woff")}@font-face{font-family:"Open Sans";font-style:normal;font-display:swap;font-weight:300;unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;src:url("/Content/Fonts/open-sans-latin-300-normal.woff2") format("woff2"),url("/Content/Fonts/open-sans-latin-300-normal.woff") format("woff")}@font-face{font-family:"Open Sans";font-style:italic;font-display:swap;font-weight:400;unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+20

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HwM4hRn:QHn
MD5:	4DADC21D4ACB5B92216AFF7FDACA0683
SHA1:	ED0C8B8B87427B4075427CA0AF1B66C1CE46FE55
SHA-256:	2F95539F4B64EE2921963C8EF369F5574EFF349F489899CA9F52BC714A59AD85
SHA-512:	4297841EA50C8A66187852978CCED87A5AE1C0FC7283C0DEB810DF407BC06477096135287FB78183D2F010471972563149C79163A1678411B0C16321E5CDE998
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmxztHORvGO1BIFDc6NCnA=?alt=proto
Preview:	CgkKBw3OjQpwGgA=

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18664, version 1.0
Category:	downloaded
Size (bytes):	18664
Entropy (8bit):	7.989665836937812
Encrypted:	false
SSDEEP:	384:qpcRVULHjNgh9oqyQPxSjNuI41/CBo0UWrkmmvRKea:qpsWDGh+5QPxSjUI41KJU1wea
MD5:	8D1C44B2BF75A4E6F1BD141F9A965F4F
SHA1:	1E5DFDB7CA5EE8E823F9F5787F84B18FBDC38434
SHA-256:	441E23601FE7525A142857C98CBB2784997579D51A17F736D7964DCEEE609709
SHA-512:	AB0E1AC0F84C084B0A7AF7EB0632C40464B8B4FA9255E1D7EE42C1D7EB759DFB700E8E2129728CE07E85EA262B0BB60FB9327A0163897BB2916A81764CD5F0BC
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Content/Fonts/open-sans-latin-400-normal.woff2
Preview:	wOF2......H...........H.................................h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z5c...6.0`.L_#...A.?x...`...@...{r2..:.T...Y0d..!.,..Hit......9..C....Y<i.....H.Z..M)....&.......I.h.y_.&.....Df....j......s..D...h...{.o>xi...`......W.W.......q..5.^.?mA...f..+...R`........;?.o..}.E}......%-6\c.6 .....C.....w.1.9c.....I[)).BCTB.(+#e.pw...u{.=~..ot..&I....Q..zYK.;Gk.l..=......5.lkT5.wP.%./.~...\|._%L...]bgg-f]}Z....A.c..,y..N..3i...H\}\|.{mX.42.T......X..8..P..@...\|$......]....T....j.C...J.......{..'...J`[K...VDJ2._J...C... .sh.? i.~A.Sm...6..4..Es...r...j.R...h^.5.{..ol'$..I{7....]...5....rY.......}O_..c...8.Fpd...s(.w.].w.......__bV.B.1.. 10.X.....l..)J0x...3..8..j+...O..u.v.C*..Eg..w.7.d.;@.-?S%t#...ka.....=ZU.H.B..H...(....>.f....9.:..p.D4....Vr.....C....N.".r..RD..k$.<L.`!.....jo?^w..:........ele~..(`....x...i......7.....K.K.6.:tB...Z.c4D"C.=..$..3.W..op"\|.U...pFM0.Z.p..H..YK..(....@^1....k.[.@^[.~..9..@"..?...&....R.......

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18628, version 1.0
Category:	downloaded
Size (bytes):	18628
Entropy (8bit):	7.989085574060275
Encrypted:	false
SSDEEP:	384:xHRXR3fyrnHsU8TObvgqzJTZrmMSB0YLJwP+qL8edBPJs:xRXRPyrnHsU8TQFTZrmMW0YLJt3eXS
MD5:	D9DBA5AC184A0A14655560ABE5C4AA9B
SHA1:	A957967739A24FC09039E35AF1898FB239D61445
SHA-256:	752AC7B6A1D83373E07AF1EE17B3A0E4A304E9B9304B55E49D93C7AB6A1C394E
SHA-512:	6C0DD3DE5FF91CA97ABD2CB67BC7595C490FA572767144C424F53D7BBBCE1E5BA2EB236C109B8C260DF98A8AB774631EA43BBDBC887F8B0751C85186CB3A44C1
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Content/Fonts/open-sans-latin-600-normal.woff2
Preview:	wOF2......H...........HY.............................N..h.`?STATZ..0..\|........t.."..2..6.$..`. ..&........z7.7.q;..].4....E.q.`\|......I...Q..T.MD .a.......c.>J1..@..M....6c...@.&..g.......%k..........B....^;3J8<....+. B2.N,.Y.r...X...d....yP(.k....X..1Y)"`.-[.7.e".'6I..C9.......Ory....NUu...ped..........gz.o.\.0...r_.).D..."Wq.(G.s..>.v.>....m....]...o.n.EB.DV....}sp..a1.2...d.i1..6vHA.<.......\..,.O.w...o..R..GU..Q.0....a..&.p....UJK..(.W}.f..2..4.[.5....!...%O....;...}.u.v...\"....j.RM...FX.{..P'....u.3.........O..D&Z...i.lgg.C${Om...^>../g......F.h.e..W..6W...W..H3.U...c.4.Ji....fh.>. ..Eu...{w.i.....u.%\U..?V..d,aQ.#A..@...M5..\r).o........0.).H.h<....._...X.sA..!...I\..$.........\9..$/0\"/........sQ49.m.M..>..s.."D....~.f.:.6.6. "...:..^g.1..z...r.:1A...YA...?.vP.....g.._U..;..t.a.........e.W@J..Vj..zm......9.S.mGzc_f.9.=...\|1(...=.....m..9...}R...@..9..(%.sJ...N@....Z.+}/p]).&.R..B.. LLD..*.Y.2.................5.q.......3IN6-;69r.>y.{

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6476
Entropy (8bit):	7.948526874854769
Encrypted:	false
SSDEEP:	96:SS63U+f8CTR58WdRhgxwt04jiuUjjuc0xtw0XfKlIhYgP6gZIp/hk8mN:SScU+fFTRdEt4jt3Hw0XfKWA/LmN
MD5:	A38760293FBBB45792533BDC9F14961C
SHA1:	095E286E1556360948F71E6672C0E818439AE91B
SHA-256:	CC0118FFAC60688A8B64DD6E8BC83946AAA6CBCE09CB0083F5EFB720C3BE0909
SHA-512:	DAB835244D3080025E350920135D65F918535319CA20A083094889FA8649CF45052BD29BE0FE87F9FCD9AB2BB2953E872429AA1A18F29AA8D210E8D6AFBD259E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...d.....<.......pHYs.................sRGB.........gAMA......a.....IDATx..Mv.F..#Qr.=.....${...D.@...ZZ^....y..' ..?...y..u..'.u..i.....EJdGD&.PUH...?..^..@...$"####..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A....Bm...u5......o:p.........W@.E...(...G.-4.>....".j..<69..U...E....j.............#C...v..KN...p0.D..f....8f...e7S. T......y...F.].+...e@.VEP..@..).....A..D..b...U..........A.ZA.V.>... ..~..FMAXdD`U ..]..}...5..$h."a.}.I..7.a....8Ph\7...v./~.....[C.J.1.l.E`.)...OQhL.C).......Y......A...VB....&C.....U.iW.n./.C..I.r.<-"b......].....D..8...o...@_.v]..@..G...t...V...............\...X7.{.5{._U.gh.......^...z&.u...F.~......q.X.........3..&.dh.d.N.....{hx.gh.f..~..O.x1...5..v].4v..k.&.....6lsUp.uXO....,^..."u..5kR...!..g...5..6D2.k.~.....].C.....f..>.....E.zS....v.UG..E.(...x4\.............jbe.'.....].%......jX.u]=.AR..9..x.M...%+.....s..a.iWt...-....=.......(.V.Pc......R..=...Kj.9B#..e..hH...).H .}.Ko..X.....b.=...=.

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.10234445065835
Encrypted:	false
SSDEEP:	24:2zLxFNCi0KFIlln7qTln9A7z9/y9FN3S1v:2xCxKFIllWTlgIW
MD5:	F2B8A76D0DBD7F2E2BE7E914360D7AC8
SHA1:	73410F16C47E0FF47E71972295CF4D44D9328D0A
SHA-256:	73BAA0197C70A9FAA8224551A5729DB93C42C213F97C5693DBEE3813A8EDEF4C
SHA-512:	37CE3A1914BE75E52766D7BC6EDFA2DFF5FE07C9F83294BC71E969C346ED1701FD14D6C8ADC065688A3ED52366C3A4E29FB2E65B8179917F0DC77533EBFB15D7
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Content/Images/favicon.ico?v=24259.16716.14.14
Preview:	............ .h.......(....... ..... ................................................. ..@ ..0 ..0 ..0 ...................................... ..` ... ... ... ... ... ... ... ...................... .. ... ... ... ..@........ ..0 ... ... ... .. ................ ... ... .. ........................ .. ... ... .......... ..p ... ..0................................ .. ... ........... ... ........... .. ..` ... ... ..` .. ........ ..o ... .. .. ... ..@........ ... ... ... ... ... ... ...... .. ... ..P ..P ... .......... ... ..p ..@ ..@ ..@ ... .......... ... ..@ ..P ... .......... ... ... ... ... ... ... .. ........ ... ..0 ..0 ... ..@........ ... ... ..p ..` ... ... ...... .. ... ..P.... ... ........... .. ..p ... ... ... .. ........ ... ... ...... ..` ... .. ................................ .. ... ............... ... ... .. ........................ .. ... ... .............. .. ... ... ... .. ........ .. ..` ... ... .. .................... .. ... ... ... ... ... ... .

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (747)
Category:	downloaded
Size (bytes):	3796
Entropy (8bit):	5.152999411909093
Encrypted:	false
SSDEEP:	96:Rc4KanHBOMz6iktLAFF9jFYBm0vuQti+EJ:RcvaHcMzzktLAFHJ
MD5:	80E46A25ED4DA92BB69C98F3DD77FF21
SHA1:	2A7EA831D9CF3A1B51E146193A83FCCD1087B573
SHA-256:	EB9B9FF2CFDD823052A83175FD76677F5F3ED463510807099C8F89F5ED03DEB9
SHA-512:	399117683AA893614C05EFBDC81E2CCC6DC7AD1CB479C0AE5767D7FDA469BF16D7916C8C04B7F7C9A5980B6852B07A7D7212F60B3B2799801CB850C51DDCBC0B
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access
Preview:	...<!DOCTYPE html>.<html lang="en">.<head>..<meta charset="utf-8">..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />..<meta name="viewport" content="width=device-width, initial-scale=1">..<meta name="description" content="Description" />..<meta name="keywords" content="Keywords" />...<link rel="shortcut icon" href="/Content/Images/favicon.ico?v=24259.16716.14.14" async />...........<title runat="server">Evicertia</title>...<link href="/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1" rel="stylesheet"/>.....<script src="/bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1"></script>..</head>.<body>..<div class="container-md h-100 bg-white d-flex flex-column evi-page-container">......<header class="row position-relative bg-white evi-shadow">.....<div class="col border-bottom">.......<div class="row justify-content-center p-2">........<div class="col-auto">.........<img alt="Logo" class="custom-logo logo" onerror="this.onerror=null;this.src=&#

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.10234445065835
Encrypted:	false
SSDEEP:	24:2zLxFNCi0KFIlln7qTln9A7z9/y9FN3S1v:2xCxKFIllWTlgIW
MD5:	F2B8A76D0DBD7F2E2BE7E914360D7AC8
SHA1:	73410F16C47E0FF47E71972295CF4D44D9328D0A
SHA-256:	73BAA0197C70A9FAA8224551A5729DB93C42C213F97C5693DBEE3813A8EDEF4C
SHA-512:	37CE3A1914BE75E52766D7BC6EDFA2DFF5FE07C9F83294BC71E969C346ED1701FD14D6C8ADC065688A3ED52366C3A4E29FB2E65B8179917F0DC77533EBFB15D7
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ................................................. ..@ ..0 ..0 ..0 ...................................... ..` ... ... ... ... ... ... ... ...................... .. ... ... ... ..@........ ..0 ... ... ... .. ................ ... ... .. ........................ .. ... ... .......... ..p ... ..0................................ .. ... ........... ... ........... .. ..` ... ... ..` .. ........ ..o ... .. .. ... ..@........ ... ... ... ... ... ... ...... .. ... ..P ..P ... .......... ... ..p ..@ ..@ ..@ ... .......... ... ..@ ..P ... .......... ... ... ... ... ... ... .. ........ ... ..0 ..0 ... ..@........ ... ... ..p ..` ... ... ...... .. ... ..P.... ... ........... .. ..p ... ... ... .. ........ ... ... ...... ..` ... .. ................................ .. ... ............... ... ... .. ........................ .. ... ... .............. .. ... ... ... .. ........ .. ..` ... ... .. .................... .. ... ... ... ... ... ... .

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45176)
Category:	dropped
Size (bytes):	143261
Entropy (8bit):	5.252305913866696
Encrypted:	false
SSDEEP:	3072:sVkMt/NhhKp6KD8Dmq/rU1ODF0wSGrRrs:sd1Nh4p6KD8Dmq41ODF0wS1
MD5:	7FDF85222ED41342A8307BEF2C45877E
SHA1:	4B8EF2D812C8D9CBF3075362AFD2D54295F3E7EF
SHA-256:	76FA458345CFD576659D210AE43380516876FE6980AC0D581325FEC4BCBA7FE1
SHA-512:	45D928528ADBE196C3C7138EF8F3DA4C506244E87E7A5C3BC3286A817B6EE574E6446F1DC4BB81CD3BFDEB498CD8D1E259FB415A3B2C939469840BCEE7BC76B0
Malicious:	false
Reputation:	low
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18740, version 1.0
Category:	downloaded
Size (bytes):	18740
Entropy (8bit):	7.989469397690815
Encrypted:	false
SSDEEP:	384:2EPvewf2YOzakuHayEYDR47frHb1E1L63ikxc/6arTdF6JZ:qwuWkuHaCi7THb2+ikxDGdF6JZ
MD5:	C53E926CEB762486A7975337170F0BE6
SHA1:	0FE2620D717725C0FE08AEF13C1FE9F2612ED333
SHA-256:	55D6F41FD18BCAA57AFB4EDBC8E4465E792FEDC842111C787AD52BFB82231693
SHA-512:	56885CD6B8C1D1DF5B2638D9684A734682496FF486921E2A442FC3E482210A9098630CF9AF6F13402C6284D79BBEAE0F90F7C6D55BCCB95ED650C084ECC34C5B
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Content/Fonts/open-sans-latin-500-normal.woff2
Preview:	wOF2......I4.......D..H.............................."..h.`?STATZ..0..\|...........=..2..6.$..`. ...........{..];..v ..\V.E.q.P..G.l. ......'P..uHZ.zU..v...W4..+..'b9V....?I.y..B^..-t/[..?....9eI.`..\.w(....i......-V.......n..r.ha...........L.Gh.\......~..H... ...bD.x;.4.nA.H..F.......d..Q.... ...().g....[.a............$[v.....J. ...Q.....a..c.).t.F.v...^......H2m..t.C...LR.....A.A>......t..\|U.....-......0....5..Y....#.aZ.x..;;k1.8Zs.im.d>...'....... X\...I9m..."...;}J.h...k..W.}..(.ATj.T..-C..v.q...Mv..,^g..0.d.@M.T.,.. ....s...?.......5...:........vF...../..h..g....'].To.y.F.GO._.e.?...L+...kY..?...I%...%{...R...%6E...T@E..Ek......$O.?...r.+.3{..y..Q......O.X./{...q.L5... @...;..........gY...C)"...].:......W.........3.. ..$......S.O..7...\|.....'0-I.` ..e......B..B.......pI.E=..>...Y.7.B...(~..<.Q.(..."i6.x.T.. ^#.I...R.............Fo.R1@G......if.....j.....q7T.3[..`t..."..(.:<.._...2....>....D_D.C.F....#.Q d..%@.8..ro...."*....:..,..MZT..aA...

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6476
Entropy (8bit):	7.948526874854769
Encrypted:	false
SSDEEP:	96:SS63U+f8CTR58WdRhgxwt04jiuUjjuc0xtw0XfKlIhYgP6gZIp/hk8mN:SScU+fFTRdEt4jt3Hw0XfKWA/LmN
MD5:	A38760293FBBB45792533BDC9F14961C
SHA1:	095E286E1556360948F71E6672C0E818439AE91B
SHA-256:	CC0118FFAC60688A8B64DD6E8BC83946AAA6CBCE09CB0083F5EFB720C3BE0909
SHA-512:	DAB835244D3080025E350920135D65F918535319CA20A083094889FA8649CF45052BD29BE0FE87F9FCD9AB2BB2953E872429AA1A18F29AA8D210E8D6AFBD259E
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/Master/Logo
Preview:	.PNG........IHDR...,...d.....<.......pHYs.................sRGB.........gAMA......a.....IDATx..Mv.F..#Qr.=.....${...D.@...ZZ^....y..' ..?...y..u..'.u..i.....EJdGD&.PUH...?..^..@...$"####..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A....Bm...u5......o:p.........W@.E...(...G.-4.>....".j..<69..U...E....j.............#C...v..KN...p0.D..f....8f...e7S. T......y...F.].+...e@.VEP..@..).....A..D..b...U..........A.ZA.V.>... ..~..FMAXdD`U ..]..}...5..$h."a.}.I..7.a....8Ph\7...v./~.....[C.J.1.l.E`.)...OQhL.C).......Y......A...VB....&C.....U.iW.n./.C..I.r.<-"b......].....D..8...o...@_.v]..@..G...t...V...............\...X7.{.5{._U.gh.......^...z&.u...F.~......q.X.........3..&.dh.d.N.....{hx.gh.f..~..O.x1...5..v].4v..k.&.....6lsUp.uXO....,^..."u..5kR...!..g...5..6D2.k.~.....].C.....f..>.....E.zS....v.UG..E.(...x4\.............jbe.'.....].%......jX.u]=.AR..9..x.M...%+.....s..a.iWt...-....=.......(.V.Pc......R..=...Kj.9B#..e..hH...).H .}.Ko..X.....b.=...=.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45176)
Category:	downloaded
Size (bytes):	143261
Entropy (8bit):	5.252305913866696
Encrypted:	false
SSDEEP:	3072:sVkMt/NhhKp6KD8Dmq/rU1ODF0wSGrRrs:sd1Nh4p6KD8Dmq41ODF0wS1
MD5:	7FDF85222ED41342A8307BEF2C45877E
SHA1:	4B8EF2D812C8D9CBF3075362AFD2D54295F3E7EF
SHA-256:	76FA458345CFD576659D210AE43380516876FE6980AC0D581325FEC4BCBA7FE1
SHA-512:	45D928528ADBE196C3C7138EF8F3DA4C506244E87E7A5C3BC3286A817B6EE574E6446F1DC4BB81CD3BFDEB498CD8D1E259FB415A3B2C939469840BCEE7BC76B0
Malicious:	false
Reputation:	low
URL:	https://evicertia.com/bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1
Preview:	/*. @popperjs/core v2.11.8 - MIT License. /..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){"use strict";function t(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function r(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function o(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}var i=Math.max,a=Math.min,s=Math.round;function f(){var e=navigator.userAgentData;return null!=e&&e.brands&&Array.isArray(e.brands)?e.brands.map((function(e){return e.brand+"/"+e.version})).join(" "):navigator.userAgent}function c(){return!/^((?!chrome\|android).)safari/i.test(f())}function p(e,o,i){void 0===o&&(o=!1),

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 10:03:50.134793043 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 8, 2024 10:03:52.772964954 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.773005009 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:52.773070097 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.773402929 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.773462057 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:52.773518085 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.774116039 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.774130106 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:52.774357080 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:52.774368048 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.456548929 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.456846952 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.456875086 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.457863092 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.457943916 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.458842039 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.458885908 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.459091902 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.459096909 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.465739965 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.465933084 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.465962887 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.466964006 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.467022896 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.467319965 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.467365980 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.499454975 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.514583111 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:53.514601946 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:53.618817091 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.228405952 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.228497028 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.228657961 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.457396984 CEST	49735	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.457446098 CEST	443	49735	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.467135906 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.511409044 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.918410063 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.918479919 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.918543100 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.940711975 CEST	49736	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.940746069 CEST	443	49736	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.945801020 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.945843935 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:54.945930004 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.946562052 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:54.946595907 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.453912973 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:55.453958988 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:55.454036951 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:55.458297968 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:55.458319902 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:55.618067026 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.619646072 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:55.619692087 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.620125055 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.621336937 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:55.621433973 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.626818895 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:55.671403885 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:55.823271036 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:55.823337078 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:55.823419094 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:55.824969053 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:55.824980021 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.037776947 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.037883043 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.037965059 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.038757086 CEST	49739	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.038794041 CEST	443	49739	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.058597088 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.058691025 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.058782101 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.059349060 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.059402943 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.095072985 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:56.098650932 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:56.098668098 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:56.099524975 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:56.099631071 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:56.102041960 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:56.102108002 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:56.148916960 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:56.148952007 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:03:56.197290897 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:03:56.485295057 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.485384941 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.491225958 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.491241932 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.491677999 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.541012049 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.580284119 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.627408028 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.712960005 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.716389894 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.716417074 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.716897011 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.717900038 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.717977047 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.718240023 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:56.763407946 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:56.767733097 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.767824888 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.767884970 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.768013000 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.768037081 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.815409899 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.815444946 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:56.815666914 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.815851927 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:56.815864086 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.094995022 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.095053911 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.095110893 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.095127106 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.095168114 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.096240044 CEST	49742	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.096260071 CEST	443	49742	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.478569984 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.478650093 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.479856014 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.479863882 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.480065107 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.481139898 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.523401976 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.596757889 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.596796036 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.596890926 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.597345114 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.597357988 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.598447084 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.598488092 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.598581076 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.599051952 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.599060059 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.599147081 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.600409031 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.600420952 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.600596905 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:57.600605965 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:57.762882948 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.762955904 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.763001919 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.794034004 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.794054031 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:57.794066906 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 8, 2024 10:03:57.794073105 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 8, 2024 10:03:58.250633001 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.251200914 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.251224995 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.251579046 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.251898050 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.251955986 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.252394915 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.273000002 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.273334026 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.273344994 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.273386002 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.273782969 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.273802042 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.274960995 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.275366068 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.275571108 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.276989937 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.277028084 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.277103901 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.277893066 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.277961016 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.278012037 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.295444965 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.319428921 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.319436073 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.321844101 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.321923971 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.367346048 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.562016964 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562089920 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562131882 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562143087 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.562159061 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562216997 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.562225103 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562676907 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.562731981 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.562740088 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.574079990 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.574223042 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.574337959 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.574412107 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.574484110 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.574599981 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.603419065 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.637161016 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.637228966 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.637407064 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.637497902 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.637603998 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.637679100 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.638168097 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.638235092 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.638442993 CEST	49746	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.638478041 CEST	443	49746	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662595034 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662631989 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662673950 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.662684917 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662725925 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.662867069 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662914991 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.662924051 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.662966013 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.663855076 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.663913012 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.664433002 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.664486885 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.664602995 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.664652109 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.665218115 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.665257931 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.665271044 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.665277004 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.665321112 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.666024923 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.666095018 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.675348043 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.675498962 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.675565958 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.675566912 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.675640106 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.675843000 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.675909042 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.675926924 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.675952911 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.676141024 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.676155090 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.676754951 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.676820040 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.676831961 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.676852942 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.676966906 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.677010059 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.677023888 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.677077055 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.677602053 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.677663088 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.677715063 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.677767992 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.677951097 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.678018093 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.763250113 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.763350010 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.763510942 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.763569117 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.763653994 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.763706923 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.764522076 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.764579058 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.765337944 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.765408039 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.766349077 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.766417980 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.766505003 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.766562939 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.767051935 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.767102003 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.767105103 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.767118931 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.767160892 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.767189026 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.767245054 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.768012047 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.768054962 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.768178940 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.768232107 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.776266098 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.776382923 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.776470900 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.776470900 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.776494980 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.776542902 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.776595116 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777007103 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.777077913 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777093887 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.777132034 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.777151108 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777164936 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.777195930 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777436972 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777858019 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.777918100 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.777981043 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.778033018 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.778093100 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.778137922 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.778857946 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.778923988 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.779680967 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.779746056 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.779781103 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.779828072 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864336967 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864511013 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864514112 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864522934 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864545107 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864554882 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864568949 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864604950 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864650011 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864701033 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864803076 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.864867926 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.864953041 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.865000963 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.865147114 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.865202904 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.865262032 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.865307093 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.865824938 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.865870953 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.865968943 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.866018057 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.866080046 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.866128922 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.867177963 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.867194891 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.867228985 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.867234945 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.867254019 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.867278099 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.868014097 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.868057013 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.868072033 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.868077993 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.868100882 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.868930101 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.868946075 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.868985891 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.868993044 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.869021893 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.876925945 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.876975060 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877080917 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877154112 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877154112 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877154112 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877229929 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877289057 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877299070 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877315998 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877345085 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877387047 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877563953 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877630949 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877649069 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877671957 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877722025 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877734900 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877775908 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877829075 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877840042 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877902031 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.877954960 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.877966881 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878007889 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878015041 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878035069 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878056049 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878137112 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878190041 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878201962 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878242016 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878258944 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878272057 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878304005 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878324032 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.878334045 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878432989 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.878488064 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.881805897 CEST	49745	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.881838083 CEST	443	49745	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.920665979 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.950959921 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.951008081 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.951035023 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.951040030 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.951070070 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.951096058 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.965055943 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965074062 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965133905 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.965142965 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965195894 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.965657949 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965673923 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965722084 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.965729952 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.965775967 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.966165066 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.966178894 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.966232061 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.966238976 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.966280937 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.969928980 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.969964027 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.969988108 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.969991922 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.970014095 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:58.970021963 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.970055103 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.970273018 CEST	49744	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:58.970288038 CEST	443	49744	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.140393019 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.140434027 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.140516043 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.141046047 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.141102076 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.141156912 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.163767099 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.163793087 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.164099932 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.164118052 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.187825918 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.187825918 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.187866926 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.187876940 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.187942028 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.187942028 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188180923 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188221931 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.188446045 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188536882 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188553095 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.188838005 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188851118 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:03:59.188868999 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:03:59.188893080 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044140100 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044317007 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.044326067 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044406891 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044557095 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.044563055 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044614077 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044857979 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.044919968 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.044974089 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.045161963 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.045218945 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.045311928 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.045373917 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.047184944 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.047358036 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.047379971 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.047766924 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.047935009 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.047957897 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.048255920 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.048314095 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.048578024 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.048635960 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.048743010 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.048751116 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.048918009 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.049038887 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.049299955 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.049355030 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.049469948 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.049480915 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.060801983 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.061048031 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.061068058 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.062494040 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.062544107 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.062963009 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.063043118 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.063131094 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.063141108 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.087421894 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.091396093 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.102364063 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.102739096 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.117849112 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.375679016 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.375708103 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.375756025 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.375807047 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.375817060 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.375952005 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.376499891 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.376595020 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.376686096 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.376734972 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.376795053 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.376801014 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.376852989 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.377279043 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.377337933 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.377345085 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.377489090 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.377532005 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.377536058 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.380714893 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.380770922 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.380799055 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.380821943 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.380841017 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.380852938 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.381427050 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.381468058 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.381475925 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382122993 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382175922 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.382181883 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382749081 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382816076 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382826090 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.382868052 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.382894993 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.383660078 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.383737087 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.383768082 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.383824110 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.383902073 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.383910894 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.390980005 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.391037941 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.391786098 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.392055988 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.392061949 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.430138111 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.430247068 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.445557117 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.474853039 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.475570917 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.475599051 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.475742102 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.475742102 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.475750923 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.475804090 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.475986004 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476052046 CEST	49748	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476062059 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476074934 CEST	443	49748	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476139069 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476193905 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476197004 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476207972 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476248026 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476845980 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476900101 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476911068 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476914883 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476944923 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476949930 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.476969004 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.476972103 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.477022886 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.477022886 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.477027893 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.477071047 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.477118015 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.477509022 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.477562904 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.477598906 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.479259968 CEST	49749	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.479283094 CEST	443	49749	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.479536057 CEST	49750	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.479540110 CEST	443	49750	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.487880945 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.487934113 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.487941980 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.487963915 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488028049 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488091946 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488107920 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488147020 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488151073 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488176107 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488193035 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488202095 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488240957 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488718987 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488729000 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488775969 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488787889 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488804102 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488831997 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488857031 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.488857985 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.488903046 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.489733934 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.489785910 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.490559101 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.490605116 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.490613937 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.490655899 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.491139889 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.491189003 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.491198063 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.491234064 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.491242886 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.491254091 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.491300106 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.492203951 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.492235899 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.492260933 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.492270947 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.492314100 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.492671967 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.492726088 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.512681961 CEST	49751	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.512720108 CEST	443	49751	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.529582977 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.529635906 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.530307055 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.530307055 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.530390978 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.569818974 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.569880962 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.582818985 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.582860947 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.582884073 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.582897902 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.582942009 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.583102942 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.583138943 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.583149910 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.583159924 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.583177090 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.583199978 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.583208084 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.583247900 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.584585905 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.584652901 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.584745884 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.584798098 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.584817886 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.584866047 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.585241079 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.585280895 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.585304022 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.585310936 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.585325956 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.585336924 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.585380077 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.585388899 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586220980 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586282969 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.586292028 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586332083 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586342096 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.586352110 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586379051 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.586388111 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.586431026 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.586435080 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587265968 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587311029 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587318897 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.587331057 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587359905 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587376118 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.587390900 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.587413073 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.588453054 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.588507891 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.588516951 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.636097908 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.671030045 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.671081066 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.671099901 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.671113014 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.671147108 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.683346033 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683399916 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.683417082 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683470964 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683518887 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.683526993 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683571100 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.683609962 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683650970 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683672905 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.683684111 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.683696032 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684328079 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684406996 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684413910 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684432983 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684475899 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684484005 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684807062 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684840918 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684865952 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684870958 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684881926 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.684891939 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684914112 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.684993029 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685045004 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.685051918 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685631037 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685687065 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.685694933 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685796976 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685844898 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.685853004 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685873032 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685897112 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.685905933 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.685916901 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.686640978 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.686695099 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.686702013 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.686714888 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:00.686769009 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.686844110 CEST	49747	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:00.686861992 CEST	443	49747	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.194679022 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.227653980 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.227704048 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.228907108 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.274879932 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.485563993 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.485995054 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.518532991 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.563405991 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.716634035 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.716902971 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.716976881 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.719099045 CEST	49753	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.719122887 CEST	443	49753	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.739381075 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.739443064 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:01.739523888 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.739820957 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:01.739839077 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.395277977 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.395685911 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:02.395728111 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.396224976 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.403354883 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:02.403465986 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.403986931 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:02.451416016 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.471546888 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 8, 2024 10:04:02.471616983 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 8, 2024 10:04:02.691809893 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.691903114 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:02.691962957 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:02.693334103 CEST	49755	443	192.168.2.4	94.103.116.70
Oct 8, 2024 10:04:02.693360090 CEST	443	49755	94.103.116.70	192.168.2.4
Oct 8, 2024 10:04:05.996712923 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:04:05.996793032 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:04:05.996948957 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:04:07.643655062 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 8, 2024 10:04:07.643670082 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 8, 2024 10:04:08.189567089 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 8, 2024 10:04:08.195199013 CEST	80	49723	93.184.221.240	192.168.2.4
Oct 8, 2024 10:04:08.195255041 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 8, 2024 10:04:19.128379107 CEST	52766	53	192.168.2.4	162.159.36.2
Oct 8, 2024 10:04:19.133424044 CEST	53	52766	162.159.36.2	192.168.2.4
Oct 8, 2024 10:04:19.133572102 CEST	52766	53	192.168.2.4	162.159.36.2
Oct 8, 2024 10:04:19.133627892 CEST	52766	53	192.168.2.4	162.159.36.2
Oct 8, 2024 10:04:19.138499022 CEST	53	52766	162.159.36.2	192.168.2.4
Oct 8, 2024 10:04:19.603574991 CEST	53	52766	162.159.36.2	192.168.2.4
Oct 8, 2024 10:04:19.604605913 CEST	52766	53	192.168.2.4	162.159.36.2
Oct 8, 2024 10:04:19.612265110 CEST	53	52766	162.159.36.2	192.168.2.4
Oct 8, 2024 10:04:19.612345934 CEST	52766	53	192.168.2.4	162.159.36.2
Oct 8, 2024 10:04:45.731767893 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:45.731794119 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:45.731884003 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:45.735918999 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:45.735934973 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.768315077 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.768445015 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:46.778826952 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:46.778867006 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.779238939 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.826312065 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:46.867412090 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.923885107 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.923950911 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.923974037 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.924015045 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.924020052 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:46.924047947 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.924060106 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:46.924071074 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:46.924112082 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182444096 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182478905 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182531118 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182566881 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182598114 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182614088 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182645082 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182776928 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182820082 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182836056 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182845116 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.182878017 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.182893991 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.191293955 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.191319942 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.191368103 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.191376925 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.191411972 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.191437960 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.192502975 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.192523003 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.192579031 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.192585945 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.192626953 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.192653894 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.193598986 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.193618059 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.193676949 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.193684101 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.193731070 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.193752050 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.195328951 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.195348978 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.195408106 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.195415974 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.195453882 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.196679115 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.196700096 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.196753025 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.196759939 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.196800947 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.196810007 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.198425055 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.198443890 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.198494911 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.198502064 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.198537111 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.198569059 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.199827909 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.199846983 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.199887991 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.199894905 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.199920893 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.199940920 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.201312065 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.201330900 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.201400995 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.201409101 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.201448917 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.202630997 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.202650070 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.202724934 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.202732086 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.202780962 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.203664064 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.203726053 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.203744888 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.203794956 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.203800917 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.203834057 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.203860998 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.204221964 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.204750061 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.204824924 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.204830885 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.204844952 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.204874039 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.204910994 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.205152035 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.205193043 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.205210924 CEST	52771	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.205220938 CEST	443	52771	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.297230005 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.297353029 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.297610044 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.299663067 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.299748898 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.300029993 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.301126003 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.301152945 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.301357031 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.302067041 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.302103043 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.302378893 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.303992987 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304049015 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.304112911 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304342985 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304364920 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.304465055 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304510117 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.304567099 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304580927 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.304713964 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304733038 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:47.304869890 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:47.304893970 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.234065056 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.234761953 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.234801054 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.235152960 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.235383034 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.235390902 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.235780001 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.235807896 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.236056089 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.236609936 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.236615896 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.236646891 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.236675024 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.237131119 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.237138033 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.257214069 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.257230997 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.257720947 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.257752895 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.257755995 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.257766008 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.258373022 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.258380890 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.258521080 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.258526087 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333400965 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333465099 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333518982 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.333555937 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333889008 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.333894014 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333945990 CEST	52774	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.333950043 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.333966017 CEST	443	52774	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.334453106 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.334523916 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.334573984 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.335632086 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.335652113 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.335661888 CEST	52776	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.335669994 CEST	443	52776	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.336996078 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337030888 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337090969 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.337121964 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337172985 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.337289095 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.337306023 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337342978 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.337543011 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337588072 CEST	443	52772	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.337635994 CEST	52772	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.339123964 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.339160919 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.339277983 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.340878963 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.340888977 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.340939045 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341207027 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341222048 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.341240883 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341262102 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.341310978 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341371059 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341386080 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.341551065 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.341563940 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.360759020 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.360831022 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.360873938 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.360997915 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.360997915 CEST	52775	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.361012936 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361022949 CEST	443	52775	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361262083 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361288071 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361330986 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.361347914 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361387014 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.361481905 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.361488104 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361505985 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.361634016 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361664057 CEST	443	52773	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.361701965 CEST	52773	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.363862038 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.363905907 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.363909006 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.363957882 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.363965034 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.364018917 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.364202976 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.364216089 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.364252090 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.364268064 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.996735096 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.997488976 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.997509003 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:48.998126984 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:48.998140097 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.005137920 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.005595922 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.005605936 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.006110907 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.006117105 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.011940002 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.011966944 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.012314081 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.012353897 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.012495995 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.012535095 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.012892008 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.012900114 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.013137102 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.013154030 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.034121990 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.034624100 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.034657955 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.035157919 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.035167933 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.093895912 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.094036102 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.094152927 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.094305992 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.094321012 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.094338894 CEST	52778	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.094347000 CEST	443	52778	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.097771883 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.097800970 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.097877026 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.098066092 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.098074913 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.105485916 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.105567932 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.105734110 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.105767012 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.105767012 CEST	52777	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.105775118 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.105784893 CEST	443	52777	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.108103991 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.108148098 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.108211994 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.108371973 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.108387947 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.111345053 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.111435890 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.111534119 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.111565113 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.111579895 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.111593962 CEST	52780	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.111599922 CEST	443	52780	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.113712072 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.113766909 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.113974094 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.114099026 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.114135027 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.115808964 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.115871906 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.115943909 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.116123915 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.116123915 CEST	52779	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.116159916 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.116187096 CEST	443	52779	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.118372917 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.118412971 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.118602991 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.118743896 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.118781090 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.137237072 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.137310028 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.137553930 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.137554884 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.137554884 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.139604092 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.139631987 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.139699936 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.139848948 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.139873981 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.440540075 CEST	52781	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.440561056 CEST	443	52781	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.756259918 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.756938934 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.756983042 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.757642031 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.757647991 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.761353970 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.761879921 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.761904955 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.762422085 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.762427092 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.763045073 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.763430119 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.763494015 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.763901949 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.763917923 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.786494970 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.786885023 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.786899090 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.787425995 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.787430048 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.803646088 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.804029942 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.804042101 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.804553032 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.804555893 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.854612112 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.854763985 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.854831934 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.854999065 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.855024099 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.855037928 CEST	52782	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.855046034 CEST	443	52782	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.858722925 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.858822107 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.858925104 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.859133959 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.859170914 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.862462044 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.862548113 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.862611055 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.862813950 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.862840891 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.862855911 CEST	52783	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.862864017 CEST	443	52783	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.865469933 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.865560055 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.865654945 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.865823030 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.865856886 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.865926027 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.865995884 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.866170883 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.866219997 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.866246939 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.866274118 CEST	52784	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.866286993 CEST	443	52784	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.868853092 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.868943930 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.869023085 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.869183064 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.869220018 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.902199984 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.902262926 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.902342081 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.902658939 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.902707100 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.902736902 CEST	52785	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.902753115 CEST	443	52785	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.907097101 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.907166958 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.907232046 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.910010099 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.910022974 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.910051107 CEST	52786	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.910063028 CEST	443	52786	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.912553072 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.912584066 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.912795067 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.913115025 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.913140059 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.913274050 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.913295031 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:49.913439035 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.913554907 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:49.913567066 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.297971010 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.298640013 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.298902988 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.298969984 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.300054073 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.300069094 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.300323009 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.300954103 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.300990105 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.302011967 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.302018881 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.302170992 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.302210093 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.303061008 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.303067923 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.523344994 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.524830103 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.524846077 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.526333094 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.526338100 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.526868105 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.527328968 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.527359962 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.528371096 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.528386116 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.610542059 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.610719919 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.611736059 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.611804962 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.611824036 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.611864090 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.612010002 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.612091064 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.612250090 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.614042044 CEST	52787	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.614059925 CEST	443	52787	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.618429899 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.618429899 CEST	52791	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.618469000 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.618494987 CEST	443	52791	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.620168924 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.620168924 CEST	52789	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.620189905 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.620198965 CEST	443	52789	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.626178026 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.626259089 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.626523972 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.627316952 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.627351046 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.627470970 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.627760887 CEST	52790	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.627765894 CEST	443	52790	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.629620075 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.629631996 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.630572081 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.630666018 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.630722046 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.631032944 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.631042004 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.631273985 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.631607056 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.631613016 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.634725094 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.634779930 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.634843111 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.636346102 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.636369944 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.636466026 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.636827946 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.636843920 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.636857033 CEST	52788	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.636867046 CEST	443	52788	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.640227079 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.640260935 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.640286922 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.640299082 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.642937899 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.642993927 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:51.643083096 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.643241882 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:51.643260002 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.271193027 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.271955967 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.271991014 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.272567034 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.272576094 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.277453899 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.278551102 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.278634071 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.278733015 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.278739929 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.309766054 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.310352087 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.310380936 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.310986042 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.310990095 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.329402924 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.329865932 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.329886913 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.330477953 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.330482960 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.370852947 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.370946884 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.371016026 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.371186972 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.371215105 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.371236086 CEST	52794	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.371244907 CEST	443	52794	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.374939919 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.374994993 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.375066042 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.375230074 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.375247002 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.377631903 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.377688885 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.377824068 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.377849102 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.377861023 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.377876043 CEST	52797	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.377882957 CEST	443	52797	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.380084991 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.380112886 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.380182981 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.380295992 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.380311012 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.412384987 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.412470102 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.412527084 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.412686110 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.412703037 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.412714005 CEST	52795	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.412719965 CEST	443	52795	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.414952040 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.414973021 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.415133953 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.415282965 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.415296078 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.436557055 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.436613083 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.436681032 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.436769009 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.436781883 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.436815977 CEST	52796	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.436824083 CEST	443	52796	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.439012051 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.439085960 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:52.439152002 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.439281940 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:52.439295053 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.017508984 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.018569946 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.018610954 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.019690990 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.019705057 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.043775082 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.044946909 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.044955015 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.045593023 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.045598030 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.061829090 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.062612057 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.062700033 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.063822985 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.063838959 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.075798035 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.076824903 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.076854944 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.078025103 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.078031063 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.120754004 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.120868921 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.120930910 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.121345997 CEST	52798	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.121381998 CEST	443	52798	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.126950026 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.126985073 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.127079964 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.127413988 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.127427101 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.146027088 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.146100998 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.146219969 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.146620035 CEST	52799	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.146636963 CEST	443	52799	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.153736115 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.153780937 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.153865099 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.154463053 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.154475927 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.164769888 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.164930105 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.165028095 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.165800095 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.165818930 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.165854931 CEST	52800	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.165860891 CEST	443	52800	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.172525883 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.172576904 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.172852039 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.173124075 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.173140049 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.175960064 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.176024914 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.176125050 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.176316023 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.176337957 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.176351070 CEST	52801	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.176356077 CEST	443	52801	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.181078911 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.181174040 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.181261063 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.181453943 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.181490898 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.793757915 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.794374943 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.794395924 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.794869900 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.794874907 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.817287922 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.817888975 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.817939997 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.818274021 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.818284035 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.843489885 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.844023943 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.844041109 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.844475985 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.844482899 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.868727922 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.869214058 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.869244099 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.869641066 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.869646072 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.896230936 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.896393061 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.896457911 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.896522045 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.896542072 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.896553040 CEST	52802	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.896559000 CEST	443	52802	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.899298906 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.899347067 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.899457932 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.899600029 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.899619102 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.922933102 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.922991037 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.923154116 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.923243999 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.923268080 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.923284054 CEST	52805	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.923291922 CEST	443	52805	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.926471949 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.926526070 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.926851034 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.927094936 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.927112103 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.945746899 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.945950985 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.946022987 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.946064949 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.946089029 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.946101904 CEST	52804	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.946110964 CEST	443	52804	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.948968887 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.949013948 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.949132919 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.949306965 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.949321985 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.973664045 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.973736048 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.973824024 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.974003077 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.974020958 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.974030972 CEST	52803	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.974036932 CEST	443	52803	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.977325916 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.977422953 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:53.977540016 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.978014946 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:53.978054047 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.356327057 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.382065058 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.382117033 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.383009911 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.383025885 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.480777979 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.480855942 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.480950117 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.481342077 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.481367111 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.481395006 CEST	52793	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.481400967 CEST	443	52793	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.486542940 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.486594915 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.486907959 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.487155914 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.487175941 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.551183939 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.552150011 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.552181005 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.553267002 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.553272963 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.582551956 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.583579063 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.583595037 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.584301949 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.584306955 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.614429951 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.615318060 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.615365028 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.616225004 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.616234064 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.637562990 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.638206005 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.638237000 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.639159918 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.639178038 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.652276039 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.652436972 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.652595043 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.652837992 CEST	52806	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.652863979 CEST	443	52806	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.657731056 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.657785892 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.657874107 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.658320904 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.658340931 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.683407068 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.683486938 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.683573008 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.706269026 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.706307888 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.706326008 CEST	52807	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.706332922 CEST	443	52807	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.710813999 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.710875034 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.711257935 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.711510897 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.711532116 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.713195086 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.713341951 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.713402987 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.713517904 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.713550091 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.713568926 CEST	52808	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.713576078 CEST	443	52808	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.716689110 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.716742992 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.716798067 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.716969013 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.716991901 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.738214970 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.738281012 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.738575935 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.738811970 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.738831043 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.738841057 CEST	52809	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.738846064 CEST	443	52809	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.743498087 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.743546009 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:54.743742943 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.744086981 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:54.744105101 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.125932932 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.126602888 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.126632929 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.127129078 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.127134085 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.225979090 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.226069927 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.226325989 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.226365089 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.226385117 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.226394892 CEST	52810	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.226401091 CEST	443	52810	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.229780912 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.229820967 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.229887009 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.230074883 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.230084896 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.309654951 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.310306072 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.310359955 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.310894966 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.310911894 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.350140095 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.350759983 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.350794077 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.351475954 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.351485014 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.368037939 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.369127989 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.369163990 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.370004892 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.370012045 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.379487038 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.382750988 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.382766962 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.383382082 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.383394003 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.417597055 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.417680979 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.417907953 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.417937994 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.417957067 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.417969942 CEST	52811	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.417975903 CEST	443	52811	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.421350956 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.421395063 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.421546936 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.421732903 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.421745062 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.451316118 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.451410055 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.451488018 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.451956034 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.451970100 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.451987982 CEST	52812	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.451993942 CEST	443	52812	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.458326101 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.458372116 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.458518982 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.458971024 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.458983898 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.470405102 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.470465899 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.470608950 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.470940113 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.470973969 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.471055984 CEST	52813	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.471071959 CEST	443	52813	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.474441051 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.474478960 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.474597931 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.474787951 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.474800110 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.479523897 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.479588985 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.479690075 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.481538057 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.481551886 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.481579065 CEST	52814	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.481590986 CEST	443	52814	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.487191916 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.487231970 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.487324953 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.487612963 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.487627983 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.503036976 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:55.503081083 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:55.503350019 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:55.504012108 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:55.504024029 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:55.876473904 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.877223015 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.877243042 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.878288031 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:55.878294945 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.975171089 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.975266933 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:55.975374937 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.072530985 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.118063927 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.118489981 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.132256031 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.132291079 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.132306099 CEST	52815	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.132313013 CEST	443	52815	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.132817984 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.132837057 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.133491993 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.133497000 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.133833885 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.134402990 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.134416103 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.134841919 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.134845972 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.135605097 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.135612965 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.136290073 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.136295080 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.139852047 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.139902115 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.139962912 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.140191078 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.140202045 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.154335022 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.154876947 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.154905081 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.155797958 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.155802965 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.172106981 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:56.172590017 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:56.172616959 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:56.173075914 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:56.173734903 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:56.173808098 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:04:56.234069109 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.234160900 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.234209061 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.234633923 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.234659910 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.234675884 CEST	52816	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.234683037 CEST	443	52816	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.235157013 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.235220909 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.235254049 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.235294104 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:04:56.237307072 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.237327099 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.237338066 CEST	52818	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.237344027 CEST	443	52818	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.242362022 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.242403984 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.242453098 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.243004084 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.243015051 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.244688988 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.244729996 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.244787931 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.245059967 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.245071888 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.247656107 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.247734070 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.247771978 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.247843027 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.247852087 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.247862101 CEST	52817	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.247865915 CEST	443	52817	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.251180887 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.251225948 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.251285076 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.251607895 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.251621008 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.263623953 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.263675928 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.263711929 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.264015913 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.264022112 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.264035940 CEST	52819	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.264040947 CEST	443	52819	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.267349005 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.267380953 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.267435074 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.267556906 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.267565966 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.653260946 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 8, 2024 10:04:56.658688068 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 8, 2024 10:04:56.658749104 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 8, 2024 10:04:56.802303076 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.802943945 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.802975893 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.803596020 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.803607941 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.881556034 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.882184982 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.882217884 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.882853031 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.882863998 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.889009953 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.889420033 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.889460087 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.889983892 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.889992952 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.892654896 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.892987013 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.893021107 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.893485069 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.893496037 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.904036045 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.904109955 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.904267073 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.904346943 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.904366970 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.904381990 CEST	52821	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.904387951 CEST	443	52821	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.907943010 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.907995939 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.908087015 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.908301115 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.908312082 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.958631039 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.959300041 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.959336042 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.959969044 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.959976912 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.981115103 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.981188059 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.981264114 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.981545925 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.981570005 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.981586933 CEST	52823	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.981595039 CEST	443	52823	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.985133886 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.985197067 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.985275984 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.985471964 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.985486984 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.988153934 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.988240004 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.988287926 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.988464117 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.988476038 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.988497972 CEST	52824	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.988506079 CEST	443	52824	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.990987062 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.991025925 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.991138935 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.991272926 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.991283894 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.995806932 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.995893002 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.995999098 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.996032953 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.996049881 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.996062994 CEST	52822	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.996068001 CEST	443	52822	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.998385906 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.998418093 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:56.998538971 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.998676062 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:56.998687029 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.063682079 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.063740969 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.064011097 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.064049006 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.064069986 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.064083099 CEST	52825	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.064089060 CEST	443	52825	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.068012953 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.068044901 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.068106890 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.068275928 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.068285942 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.544270992 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.545011044 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.545043945 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.545572996 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.545579910 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.640966892 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.641508102 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.641663074 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.641690016 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.641957045 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.641992092 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.642333031 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.642339945 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.642626047 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.642632961 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.647684097 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.648148060 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.648183107 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.648782015 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.648789883 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.651952028 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.652045965 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.652200937 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.652458906 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.652482986 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.652497053 CEST	52826	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.652503014 CEST	443	52826	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.657175064 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.657234907 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.657305956 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.657465935 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.657479048 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.742089033 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.742182970 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.742264986 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.742508888 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.742532969 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.742546082 CEST	52828	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.742552996 CEST	443	52828	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.745184898 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.745342970 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.745398045 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.745498896 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.745517969 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.745531082 CEST	52829	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.745536089 CEST	443	52829	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.746139050 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.746179104 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.746249914 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.746532917 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.746546030 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.748151064 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.748197079 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.748317003 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.748460054 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.748471975 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.751868963 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.752302885 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.752321959 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.752898932 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.752903938 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.755139112 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.755223036 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.755356073 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.755407095 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.755407095 CEST	52827	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.755428076 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.755439997 CEST	443	52827	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.758014917 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.758030891 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.758085012 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.758232117 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.758239985 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.856440067 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.856549025 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.856755972 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.856889009 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.856909990 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.856928110 CEST	52830	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.856934071 CEST	443	52830	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.861378908 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.861432076 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:57.861596107 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.861820936 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:57.861834049 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.309422016 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.310589075 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.310589075 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.310621023 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.310645103 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.404632092 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.405359030 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.405399084 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.405839920 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.405844927 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.408518076 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.409104109 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.409121037 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.409727097 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.409732103 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.416382074 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.417027950 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.417062998 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.417424917 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.417431116 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.418740988 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.418898106 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.418948889 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.419065952 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.419081926 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.419090986 CEST	52831	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.419096947 CEST	443	52831	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.422460079 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.422559023 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.422638893 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.422775030 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.422810078 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.507324934 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.507422924 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.507483959 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.507824898 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.507843971 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.507854939 CEST	52833	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.507860899 CEST	443	52833	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.508135080 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.508295059 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.508338928 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.520137072 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.520232916 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.520298958 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.522536993 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.522588015 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.522619009 CEST	52832	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.522654057 CEST	443	52832	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.524739981 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.524739981 CEST	52834	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.524771929 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.524784088 CEST	443	52834	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.536235094 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.536284924 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.536354065 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.537528038 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.537553072 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.537934065 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.538598061 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.538674116 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.538733959 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.538759947 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.538793087 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.538914919 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.538929939 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.539004087 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.539024115 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.545145035 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.545937061 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.545953989 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.546444893 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.546448946 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.648535967 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.648602962 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.648778915 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.648886919 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.648886919 CEST	52835	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.648933887 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.648962021 CEST	443	52835	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.651735067 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.651843071 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:58.651922941 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.652136087 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:58.652174950 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.060545921 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.061182022 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.061217070 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.061674118 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.061682940 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.161911964 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.162061930 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.162132978 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.162287951 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.162287951 CEST	52836	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.162328005 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.162350893 CEST	443	52836	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.165523052 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.165601969 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.165694952 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.165828943 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.165849924 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.184395075 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.185040951 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.185065031 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.185868025 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.185879946 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.186182976 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.186530113 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.186598063 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.186974049 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.186989069 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.213033915 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.213583946 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.213603973 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.214039087 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.214050055 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.286586046 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.286748886 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.286890984 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.286930084 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.286953926 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.286967993 CEST	52839	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.286977053 CEST	443	52839	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.287302971 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.287502050 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.287573099 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.287724018 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.287749052 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.287760019 CEST	52837	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.287767887 CEST	443	52837	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.290280104 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290321112 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.290414095 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290538073 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290539980 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290554047 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.290584087 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.290632963 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290769100 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.290785074 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.296756029 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.297137022 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.297162056 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.297578096 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.297588110 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.329530954 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.329679966 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.329787016 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.329833984 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.329833984 CEST	52838	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.329857111 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.329866886 CEST	443	52838	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.332443953 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.332509995 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.332612991 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.332854033 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.332874060 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.395950079 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.396023035 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.396229029 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.396229029 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.396229029 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.398952961 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.399008036 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.399080992 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.399245977 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.399265051 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.696192980 CEST	52840	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.696223021 CEST	443	52840	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.818037033 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.818650007 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.818747044 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.819175959 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.819194078 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.919958115 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.920056105 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.920129061 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.920479059 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.920523882 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.920651913 CEST	52841	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.920670033 CEST	443	52841	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.923655033 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.923691034 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.923901081 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.924120903 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.924130917 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.935374975 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.936060905 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.936104059 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.936714888 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.936727047 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.950886011 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.951370001 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.951407909 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.952178001 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.952183008 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.977300882 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.981762886 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.981795073 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:04:59.982646942 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:04:59.982654095 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.047852039 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.048021078 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.048106909 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.048573971 CEST	52842	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.048615932 CEST	443	52842	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.049201012 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.051595926 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.051614046 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.052679062 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.052695990 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.056421041 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.056602001 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.056740046 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057041883 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057065010 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.057076931 CEST	52843	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057081938 CEST	443	52843	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.057395935 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057450056 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.057528019 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057725906 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.057740927 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.061542988 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.061631918 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.061933041 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.062300920 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.062335968 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.083506107 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.083571911 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.083641052 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.084062099 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.084062099 CEST	52844	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.084075928 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.084084988 CEST	443	52844	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.090023041 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.090080976 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.090152025 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.090761900 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.090780020 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.151340961 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.151453018 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.151758909 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.151994944 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.152007103 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.152048111 CEST	52845	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.152064085 CEST	443	52845	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.157870054 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.157927990 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.158107042 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.158329010 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.158349037 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.609026909 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.610169888 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.610187054 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.610963106 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.610975981 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.702605009 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.703483105 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.703548908 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.704330921 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.704345942 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.712903976 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.712976933 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.713222980 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.713722944 CEST	52846	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.713745117 CEST	443	52846	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.720432997 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.720498085 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.720567942 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.720643044 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.720843077 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.720868111 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.721455097 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.721482038 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.722187996 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.722193956 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.765072107 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.765991926 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.766021967 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.767224073 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.767230988 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.806864023 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.806936026 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.807116985 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.807585001 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.807605028 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.807621956 CEST	52848	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.807629108 CEST	443	52848	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.812627077 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.812671900 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.812916040 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.813371897 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.813383102 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826271057 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826572895 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826663971 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826715946 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.826924086 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.826961994 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.826973915 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826980114 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.826993942 CEST	52847	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.827002048 CEST	443	52847	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.827424049 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.827433109 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.829510927 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.829550982 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.829716921 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.829855919 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.829868078 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.877866030 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.877895117 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.877945900 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.877963066 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.878001928 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.878287077 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.878326893 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.878356934 CEST	52849	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.878372908 CEST	443	52849	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.882118940 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.882133007 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.882199049 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.882361889 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.882370949 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.930996895 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.931073904 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.931137085 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.931430101 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.931430101 CEST	52850	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.931477070 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.931505919 CEST	443	52850	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.935009956 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.935036898 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:00.935110092 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.935290098 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:00.935302019 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.360738993 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.362515926 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.362574100 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.363405943 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.363414049 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.460490942 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.460691929 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.460766077 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.469908953 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.469954967 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.469989061 CEST	52851	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.470005989 CEST	443	52851	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.472486019 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.474940062 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.496776104 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.496836901 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.503952026 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.503971100 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.505698919 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.505733013 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.506433964 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.506438017 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.508725882 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.508769035 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.509021044 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.510596991 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.510611057 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.523117065 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.535886049 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.535902023 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.538491964 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.538496971 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.571963072 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.576247931 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.576265097 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.577055931 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.577060938 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.600996971 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601020098 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601058960 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601069927 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601144075 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601180077 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601480007 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601515055 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601566076 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601581097 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601618052 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601722956 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601739883 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601739883 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601751089 CEST	52852	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601756096 CEST	443	52852	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601800919 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.601839066 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601984978 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.601999998 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.602009058 CEST	52853	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.602015018 CEST	443	52853	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.633574009 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.633600950 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.633655071 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.633666992 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.633750916 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.633795023 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.638828039 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.638838053 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.638845921 CEST	52854	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.638849974 CEST	443	52854	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.644506931 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.644551039 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.644618988 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.645884991 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.645910025 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.645977020 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.646184921 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.646215916 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.648595095 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.648648024 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.648711920 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.648861885 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.648874998 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.649156094 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.649183035 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.671909094 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.672236919 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.672293901 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.672445059 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.672491074 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.672523022 CEST	52855	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.672538996 CEST	443	52855	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.676690102 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.676784039 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:01.676856041 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.677464008 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:01.677479982 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.289233923 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.289819956 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.289930105 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.294827938 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.311006069 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.313954115 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.316776991 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.316809893 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.317971945 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.318006992 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.318715096 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.318718910 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.320108891 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.320137024 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.321279049 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.321290016 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.321597099 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.321608067 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.322029114 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.322033882 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.412031889 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.412201881 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.412369013 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.412419081 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.412436008 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.412450075 CEST	52858	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.412455082 CEST	443	52858	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.413392067 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.413748980 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.413824081 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.413861036 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.413872957 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.413883924 CEST	52860	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.413889885 CEST	443	52860	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.415752888 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.415788889 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.415992022 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.416002035 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.416039944 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.416085005 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.416187048 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.416198015 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.416256905 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.416266918 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.417676926 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.417860985 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.417916059 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.417958021 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.417960882 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.417970896 CEST	52857	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.417974949 CEST	443	52857	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.419992924 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.420011044 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.420170069 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.420315027 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.420326948 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.420644045 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.420902967 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.420948982 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.420994043 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.420994043 CEST	52859	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.421006918 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.421016932 CEST	443	52859	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.422986031 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.423003912 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:02.423274040 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.423437119 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:02.423449039 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.057974100 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.058561087 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.058609009 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.059437990 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.059449911 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.071717024 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.072092056 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.072137117 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.072722912 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.072736025 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.076989889 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.077486992 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.077511072 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.078109026 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.078123093 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.087961912 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.088516951 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.088582039 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.089217901 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.089231968 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.125015020 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.126010895 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.126028061 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.126691103 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.126712084 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.335979939 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336009026 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336025953 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336047888 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336082935 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336091995 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336167097 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.336219072 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.336289883 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.336467981 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336610079 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.336675882 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.348176956 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.348211050 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.348252058 CEST	52862	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.348261118 CEST	443	52862	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.349663019 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.349701881 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.349760056 CEST	52864	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.349776983 CEST	443	52864	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.353313923 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.353321075 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.353348970 CEST	52861	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.353353977 CEST	443	52861	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.353480101 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.353512049 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.353527069 CEST	52863	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.353533983 CEST	443	52863	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.360368013 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.360408068 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.360517979 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.362135887 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.362144947 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.362653971 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.362667084 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.362689018 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.363850117 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.363857985 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.365353107 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.365411043 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.365519047 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.365675926 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.365700006 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.366542101 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.366581917 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.366648912 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.366878986 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.366893053 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.434648037 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.434818983 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.435424089 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.436211109 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.436232090 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.436265945 CEST	52856	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.436271906 CEST	443	52856	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.439616919 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.439646006 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:03.439727068 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.439951897 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:03.439968109 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.019154072 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.019794941 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.019810915 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.020188093 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.020359039 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.020365000 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.020375013 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.020581007 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.020589113 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.020682096 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.020699978 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.021008015 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.021013975 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.021087885 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.021094084 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.046797991 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.049925089 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.049956083 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.052671909 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.052685022 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.080015898 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.080543041 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.080609083 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.081335068 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.081348896 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118292093 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118410110 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118469000 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.118489981 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118520021 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118576050 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.118895054 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.118915081 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.118926048 CEST	52865	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.118931055 CEST	443	52865	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.121581078 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.121733904 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.121735096 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.121793032 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.122046947 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.122055054 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.122066975 CEST	52866	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.122071028 CEST	443	52866	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.122432947 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.122483015 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.125140905 CEST	52867	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.125159979 CEST	443	52867	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.132333994 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.132381916 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.132442951 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.132724047 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.132769108 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.132823944 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.133143902 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.133162975 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.133517981 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.133536100 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.135519981 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.135601044 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.135689020 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.135849953 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.135876894 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.153506041 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.153615952 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.153656006 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.153664112 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.153703928 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.153801918 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.153810024 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.153825998 CEST	52868	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.153831005 CEST	443	52868	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.159056902 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.159099102 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.159178019 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.159337044 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.159352064 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.190046072 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.192373991 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.192430973 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.192497969 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.192512989 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.192528963 CEST	52869	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.192536116 CEST	443	52869	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.194751978 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.194782972 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.194848061 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.195028067 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.195043087 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.770973921 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.771795988 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.771961927 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.771985054 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.772984028 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.772988081 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.773571014 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.773607969 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.774427891 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.774446011 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.799411058 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.800010920 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.800054073 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.800806046 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.800817966 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.806632996 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.807063103 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.807109118 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.807549000 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.807565928 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.864413023 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.871843100 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.871907949 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.872010946 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.872014046 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.872065067 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.873719931 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.873873949 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.873965979 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.876871109 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.876948118 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.877733946 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.877748966 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.878110886 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.878138065 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.878151894 CEST	52870	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.878158092 CEST	443	52870	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.880203009 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.880234003 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.880250931 CEST	52871	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.880258083 CEST	443	52871	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.885193110 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.885236979 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.885354996 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.885529041 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.885545015 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.886163950 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.886205912 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.886267900 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.886363983 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.886370897 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.899137974 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.899207115 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.899353981 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.899427891 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.899429083 CEST	52873	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.899463892 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.899486065 CEST	443	52873	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.906671047 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.907100916 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.907177925 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.907429934 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.907464981 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.907491922 CEST	52872	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.907507896 CEST	443	52872	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.920473099 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.920505047 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.920619965 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.920855999 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.920869112 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.922907114 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.922914982 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.922964096 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.923346043 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:04.923353910 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.978964090 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.979392052 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:04.979525089 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.015105009 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.015141010 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.015166998 CEST	52874	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.015182972 CEST	443	52874	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.018228054 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.018265009 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.018449068 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.018712997 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.018723965 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.536225080 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.536881924 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.536905050 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.537508965 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.537514925 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.550376892 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.550874949 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.550934076 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.551316023 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.551332951 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.565269947 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.565778017 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.565793991 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.566154957 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.566164970 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.570708036 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.571197033 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.571213007 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.571706057 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.571715117 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.637876034 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.637944937 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.638186932 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.638246059 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.638262033 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.638274908 CEST	52876	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.638281107 CEST	443	52876	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.641410112 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.641449928 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.641530991 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.641738892 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.641751051 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.663530111 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.663562059 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.663604975 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.663628101 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.663681030 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.663933992 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.663933992 CEST	52875	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.663978100 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.664006948 CEST	443	52875	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.667284012 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.667334080 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.667409897 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.667567015 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.667582035 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.678652048 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.679137945 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.679148912 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.679625988 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.679630995 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.684706926 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.684773922 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.684958935 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.684958935 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.685071945 CEST	52878	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.685085058 CEST	443	52878	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.687583923 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.687629938 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.687712908 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.687869072 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.687882900 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.696225882 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.696479082 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.696594954 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.696669102 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.696669102 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.698487997 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.698524952 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.698582888 CEST	52877	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.698590994 CEST	443	52877	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.700994968 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.701086044 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.701175928 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.701303005 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.701340914 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.783282042 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.783396006 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.783596039 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.784024000 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.784032106 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.784044981 CEST	52879	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.784049034 CEST	443	52879	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.787281036 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.787314892 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:05.787477016 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.787705898 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:05.787718058 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.072257042 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:05:06.072331905 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:05:06.072504997 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:05:06.293045044 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.293735981 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.293782949 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.294270992 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.294277906 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.312712908 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.313328981 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.313363075 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.313853979 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.313863993 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.355895042 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.356460094 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.356481075 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.356966019 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.356971025 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.364727974 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.365295887 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.365334034 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.365955114 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.365962982 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.400482893 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.400549889 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.400861025 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.403498888 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.403527975 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.403543949 CEST	52880	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.403552055 CEST	443	52880	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.406686068 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.406743050 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.406893969 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.407097101 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.407120943 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.413439989 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.413474083 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.413521051 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.413539886 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.413606882 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.413752079 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.413774014 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.413790941 CEST	52881	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.413798094 CEST	443	52881	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.418195963 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.418215990 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.418337107 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.418487072 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.418498993 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.450398922 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.450995922 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.451020956 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.451589108 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.451596022 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.475400925 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.475476027 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.475723028 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.475754976 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.475769043 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.475785971 CEST	52882	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.475792885 CEST	443	52882	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.479466915 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.479505062 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.479573965 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.479757071 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.479767084 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.484638929 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.484709024 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.484766960 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.484868050 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.484886885 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.484903097 CEST	52883	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.484910011 CEST	443	52883	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.487225056 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.487257004 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.487314939 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.487452984 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.487464905 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.569330931 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.569428921 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.569633961 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.569720984 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.569736958 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.569750071 CEST	52884	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.569755077 CEST	443	52884	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.573034048 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.573072910 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:06.573143959 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.573339939 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:06.573354006 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.059587955 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.060220957 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.060266018 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.060848951 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.060862064 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.064047098 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.064445972 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.064460039 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.064969063 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.064979076 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.140281916 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.140853882 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.140882015 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.141417027 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.141422033 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.149045944 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.149487972 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.149501085 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.149852037 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.149857044 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.159898996 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.160099030 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.160242081 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.160330057 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.160330057 CEST	52886	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.160375118 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.160403967 CEST	443	52886	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.163232088 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.163340092 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.163444996 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.163602114 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.163621902 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.164459944 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.164535999 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.164638996 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.164654970 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.164689064 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.164760113 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.164761066 CEST	52885	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.164777040 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.164798021 CEST	443	52885	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.167411089 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.167445898 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.167646885 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.167646885 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.167685032 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.213454008 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.213957071 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.214046001 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.214484930 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.214499950 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.239718914 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.239824057 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.240046024 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.240107059 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.240130901 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.240144968 CEST	52887	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.240151882 CEST	443	52887	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.243777037 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.243834019 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.243897915 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.244045973 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.244060993 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.253839016 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.253977060 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.254085064 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.254128933 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.254128933 CEST	52888	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.254147053 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.254156113 CEST	443	52888	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.257194042 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.257252932 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.257325888 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.257464886 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.257483006 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.315843105 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.315900087 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.315964937 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.316030025 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.316240072 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.316257954 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.316286087 CEST	52889	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.316293001 CEST	443	52889	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.320036888 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.320071936 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.320136070 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.320305109 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.320317984 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.436439037 CEST	52820	443	192.168.2.4	142.250.185.132
Oct 8, 2024 10:05:07.436466932 CEST	443	52820	142.250.185.132	192.168.2.4
Oct 8, 2024 10:05:07.815155029 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.815876007 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.815903902 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.816399097 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.816412926 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.836709976 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.837304115 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.837327957 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.837869883 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.837874889 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.909459114 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.910087109 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.910165071 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.910598040 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.910618067 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.917341948 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.917510033 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.917568922 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.917687893 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.917706013 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.917757034 CEST	52891	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.917763948 CEST	443	52891	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.920969963 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.921015978 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.921133041 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.921307087 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.921320915 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.959197998 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.959266901 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.959487915 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.959525108 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.959546089 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.959558964 CEST	52890	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.959564924 CEST	443	52890	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.961338997 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.961941957 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.961963892 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.962728977 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.962733984 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.963788033 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.963821888 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.963875055 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.964035988 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.964049101 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.979145050 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.979537964 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.979549885 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:07.980053902 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:07.980060101 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.015760899 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.015916109 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.016030073 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.016072035 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.016082048 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.016096115 CEST	52892	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.016100883 CEST	443	52892	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.019093990 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.019133091 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.019301891 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.019371033 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.019401073 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.077065945 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.077131033 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.077191114 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.077193022 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.077244043 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.077419043 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.077436924 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.077447891 CEST	52893	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.077452898 CEST	443	52893	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.079586983 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.079664946 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.079720020 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.079940081 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.079945087 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.079956055 CEST	52894	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.079958916 CEST	443	52894	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.080615997 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.080642939 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.080785990 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.081119061 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.081127882 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.082180977 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.082199097 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:08.082257032 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.082369089 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:08.082382917 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.347768068 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.347955942 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.348304987 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.348376989 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.348418951 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.348483086 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.348866940 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.348884106 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.348932028 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.348953009 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.351876974 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.352210999 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.352246046 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.352554083 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.352569103 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.353605032 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.353915930 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.353954077 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.354264975 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.354278088 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.354865074 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.355210066 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.355222940 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.355640888 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.355655909 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447307110 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447603941 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447788954 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447832108 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447844982 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.447874069 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.447887897 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.447940111 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.447968006 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.447978020 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.448004007 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.448009968 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.448031902 CEST	52895	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.448048115 CEST	443	52895	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.448070049 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.448184967 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.448218107 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.448244095 CEST	52897	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.448260069 CEST	443	52897	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.449239016 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.449299097 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.449392080 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.449395895 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.449498892 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.449743032 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.449760914 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.449783087 CEST	52899	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.449794054 CEST	443	52899	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.451828957 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.451847076 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.451858044 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.451879978 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.451920033 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.451935053 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.452136040 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.452152014 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.452192068 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.452204943 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.453150034 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.453156948 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.453214884 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.453351974 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.453360081 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.454569101 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.455564022 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.455620050 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.455671072 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.455671072 CEST	52898	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.455692053 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.455714941 CEST	443	52898	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.456392050 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.456742048 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.456991911 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.457103014 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.457103014 CEST	52896	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.457119942 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.457139969 CEST	443	52896	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.458197117 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.458214045 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.458508968 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.458648920 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.458669901 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.459413052 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.459439039 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:09.459511042 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.459605932 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:09.459625006 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.092798948 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.093830109 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.093863010 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.094785929 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.094791889 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.098617077 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.099426985 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.099463940 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.099961996 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.099971056 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.101232052 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.102039099 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.102051020 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.102595091 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.102611065 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.104752064 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.105621099 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.105640888 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.106331110 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.106338024 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.123456001 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.123991966 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.124008894 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.124705076 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.124710083 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.191543102 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.192116976 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.192173004 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.192230940 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.192241907 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.192253113 CEST	52901	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.192259073 CEST	443	52901	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.196723938 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.196763039 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.196841002 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.197261095 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.197273016 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.197562933 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.197828054 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.197981119 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.197981119 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.198010921 CEST	52904	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.198025942 CEST	443	52904	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.201961994 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202004910 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202198029 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202289104 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202294111 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202392101 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202393055 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202496052 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202562094 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202562094 CEST	52900	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202584028 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202594995 CEST	443	52900	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.202773094 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.202788115 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.205117941 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.205295086 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.205352068 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.207037926 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.207041979 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.207082033 CEST	52902	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.207086086 CEST	443	52902	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.207432032 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.207458973 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.208321095 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.208321095 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.208344936 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.210110903 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.210143089 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.211631060 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.211850882 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.211860895 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.226484060 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.226672888 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.227602005 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.227675915 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.227693081 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.227777004 CEST	52903	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.227782965 CEST	443	52903	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.230420113 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.230456114 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.230523109 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.230665922 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.230679035 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.838550091 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.839160919 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.839183092 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.839751959 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.839760065 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.846240997 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.846637011 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.846652985 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.847069979 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.847076893 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.862200022 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.862656116 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.862677097 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.863090038 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.863097906 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.864985943 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.865315914 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.865338087 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.865686893 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.865693092 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.894314051 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.894748926 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.894768000 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.895206928 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.895210981 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.937388897 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.937586069 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.937654972 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.937784910 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.937803984 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.937818050 CEST	52906	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.937825918 CEST	443	52906	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.941101074 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.941135883 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.941205978 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.941410065 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.941421986 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947129965 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947303057 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947344065 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.947355986 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947381973 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947442055 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.947457075 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.947465897 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.947480917 CEST	52905	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.947487116 CEST	443	52905	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.949816942 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.949860096 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.949919939 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.950036049 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.950046062 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.962222099 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.962260008 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.962301016 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.962310076 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.962344885 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.962661028 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.962677002 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.962691069 CEST	52907	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.962696075 CEST	443	52907	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.964862108 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.964894056 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.964950085 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.965060949 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.965070963 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.965828896 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.966165066 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.966216087 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.966239929 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.966248989 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.966260910 CEST	52908	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.966264963 CEST	443	52908	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.968202114 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.968230009 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.968290091 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.968477964 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.968507051 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.998687983 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.999067068 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.999136925 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.999443054 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.999485016 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:10.999521971 CEST	52909	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:10.999540091 CEST	443	52909	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.007003069 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.007039070 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.007328987 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.007328987 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.007355928 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.589052916 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.589948893 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.589998960 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.590441942 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.590455055 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.604888916 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.605509043 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.605536938 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.606348991 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.606353045 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.628139019 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.628748894 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.628786087 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.629595041 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.629601002 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.650139093 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.651073933 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.651088953 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.651640892 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.651696920 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.651702881 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.652067900 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.652089119 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.652618885 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.652631998 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.690068960 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.690155983 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.690215111 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.690526009 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.690571070 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.690599918 CEST	52910	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.690617085 CEST	443	52910	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.695667028 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.695705891 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.695785999 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.696010113 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.696024895 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.705106020 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.705136061 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.705183983 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.705187082 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.705235004 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.705363989 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.705385923 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.705396891 CEST	52911	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.705403090 CEST	443	52911	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.709836960 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.709873915 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.709934950 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.710144997 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.710158110 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.731687069 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.731849909 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.731904030 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.732157946 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.732170105 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.732193947 CEST	52912	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.732198954 CEST	443	52912	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.737505913 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.737622976 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.737703085 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.738116980 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.738156080 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.748436928 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.748578072 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.748652935 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.749056101 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.749056101 CEST	52914	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.749072075 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.749079943 CEST	443	52914	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.753479958 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.753511906 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.753593922 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.753890038 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.753916025 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.772521973 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.772618055 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.772660017 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.772670031 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.772743940 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.772789001 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.772964001 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.772983074 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.773076057 CEST	52913	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.773082018 CEST	443	52913	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.777194023 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.777247906 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:11.777317047 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.777587891 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:11.777604103 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.337002993 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.337914944 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.337948084 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.338574886 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.338582039 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.348995924 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.349621058 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.349687099 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.350055933 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.350073099 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.388070107 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.389096975 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.389126062 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.390240908 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.390249014 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.415569067 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.421402931 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.421474934 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.422262907 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.422280073 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.435323000 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.435497999 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.435554981 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.435975075 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.435991049 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.436002016 CEST	52915	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.436007023 CEST	443	52915	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.440567017 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.440624952 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.440727949 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.441174984 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.441226959 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.446919918 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.447321892 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.447410107 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.447463036 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.447491884 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.447523117 CEST	52916	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.447539091 CEST	443	52916	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.448182106 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.449146986 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.449201107 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.449955940 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.449969053 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.452456951 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.452496052 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.452559948 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.452661037 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.452672005 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.495534897 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.495696068 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.495762110 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.496007919 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.496047974 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.496078014 CEST	52917	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.496093988 CEST	443	52917	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.499124050 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.499165058 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.499253035 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.499402046 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.499413967 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.517982960 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.518188000 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.518277884 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.525721073 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.525763988 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.525794029 CEST	52919	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.525809050 CEST	443	52919	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.528369904 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.528423071 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.528512955 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.528621912 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.528645039 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.553700924 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.553822041 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.553884029 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.554052114 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.554074049 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.554085016 CEST	52918	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.554091930 CEST	443	52918	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.600806952 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.600904942 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:12.601249933 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.601536036 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:12.601574898 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.105576038 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.106590033 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.106623888 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.107206106 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.107211113 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.132853031 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.133399010 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.133430004 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.134479046 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.134485960 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.138011932 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.149864912 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.149883032 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.164844990 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.171377897 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.171392918 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.173177958 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.173198938 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.173739910 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.173744917 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.208158970 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.208419085 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.208482027 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.208514929 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.208534002 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.208544016 CEST	52920	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.208549976 CEST	443	52920	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.211585045 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.211631060 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.211710930 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.211853981 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.211864948 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.242454052 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.242489100 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.242547035 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.242552042 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.242613077 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.242801905 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.242824078 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.242851973 CEST	52921	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.242856979 CEST	443	52921	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.243297100 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.245002031 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.245045900 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.245846987 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.245855093 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.248462915 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.248500109 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.248572111 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.248898983 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.248909950 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.266614914 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.266709089 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.266783953 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.266964912 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.266966105 CEST	52922	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.267014980 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.267043114 CEST	443	52922	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.269023895 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.269188881 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.269268990 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.311598063 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.311633110 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.311647892 CEST	52923	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.311654091 CEST	443	52923	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.314861059 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.314888000 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.314902067 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.314943075 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.314946890 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.315011024 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.315152884 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.315170050 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.315180063 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.315191984 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.341909885 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.342070103 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.342147112 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.342394114 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.342442036 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.342472076 CEST	52924	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.342489004 CEST	443	52924	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.347121954 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.347220898 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.347313881 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.347668886 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.347706079 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.852766037 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.853521109 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.853547096 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.854016066 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.854022026 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.901446104 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.902029991 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.902055979 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.902544022 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.902549982 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.951848984 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.951913118 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.952157974 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.952174902 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.952239037 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.952281952 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.952302933 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.952315092 CEST	52925	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.952326059 CEST	443	52925	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.953906059 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.954606056 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.954669952 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.955010891 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.955025911 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.955600023 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.955696106 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.955775976 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.955904961 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.955929995 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.965176105 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.965528011 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.965590954 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.965893984 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.965909958 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.998599052 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.999011993 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.999030113 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:13.999404907 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:13.999409914 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.010937929 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011010885 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011061907 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.011070967 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011116028 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011293888 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.011303902 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011312962 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.011317015 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.011329889 CEST	52926	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.011332989 CEST	443	52926	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.014060974 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.014117002 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.014275074 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.014426947 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.014446974 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.053296089 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.053338051 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.053411961 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.053468943 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.053518057 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.053663015 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.053699017 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.053726912 CEST	52927	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.053742886 CEST	443	52927	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.056622982 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.056663036 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.056896925 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.057059050 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.057087898 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.068367958 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.068567991 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.068634987 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.068701029 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.068701029 CEST	52928	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.068739891 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.068764925 CEST	443	52928	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.070904016 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.070935011 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.071082115 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.071207047 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.071217060 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102183104 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102535963 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102596998 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.102627993 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102649927 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102699041 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.102731943 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.102747917 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.102758884 CEST	52929	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.102763891 CEST	443	52929	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.105151892 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.105168104 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.105241060 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.105374098 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.105385065 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.637996912 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.638648987 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.638679981 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.639179945 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.639185905 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.650388956 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.650804996 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.650852919 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.651195049 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.651210070 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.705565929 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.706084013 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.706168890 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.706501007 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.706516027 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.718550920 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.718944073 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.718976974 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.719336987 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.719343901 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.743357897 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.743762016 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.743779898 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.744152069 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.744158030 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.745045900 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.745204926 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.745336056 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.745368004 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.745388031 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.745398998 CEST	52930	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.745404005 CEST	443	52930	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.748667002 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.748735905 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.748867035 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.748997927 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.749016047 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.751688957 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.751710892 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.751763105 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.751773119 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.751828909 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.751900911 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.751939058 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.751967907 CEST	52931	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.751983881 CEST	443	52931	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.754070997 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.754127026 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.754244089 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.754369020 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.754386902 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.805414915 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.805493116 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.805603981 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.805691957 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.805939913 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.805982113 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.806014061 CEST	52932	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.806029081 CEST	443	52932	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.809694052 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.809729099 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.809870005 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.810100079 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.810116053 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.819211006 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.819247007 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.819293022 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.819343090 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.819411993 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.819430113 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.819443941 CEST	52933	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.819451094 CEST	443	52933	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.821651936 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.821671963 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.821861029 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.822000027 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.822015047 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.842075109 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.842367887 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.842415094 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.842466116 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.842480898 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.842494011 CEST	52934	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.842499971 CEST	443	52934	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.845383883 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.845437050 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:14.845571995 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.845762968 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:14.845777035 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.387769938 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.388362885 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.388401031 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.388878107 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.388885021 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.403275967 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.403651953 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.403676033 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.404443979 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.404448986 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.450505018 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.450860023 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.450871944 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.451282024 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.451287985 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.466981888 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.467330933 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.467341900 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.467905998 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.467911959 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.484186888 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.484497070 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.484507084 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.484930038 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.484935045 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.500785112 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.500933886 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.500996113 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.501971960 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.501996040 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.502012014 CEST	52935	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.502019882 CEST	443	52935	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.507890940 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.507966995 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.508014917 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508599043 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508709908 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.508811951 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508833885 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.508846998 CEST	52936	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508853912 CEST	443	52936	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.508857012 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508969069 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.508992910 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.511399984 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.511436939 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.511534929 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.511745930 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.511763096 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.553996086 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.554049969 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.554116011 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.554152966 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.554208994 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.554529905 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.554549932 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.554621935 CEST	52937	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.554627895 CEST	443	52937	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.558917046 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.558927059 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.558990955 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.559233904 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.559242964 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.567691088 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.568056107 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.568101883 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.568150043 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.568150043 CEST	52938	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.568160057 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.568170071 CEST	443	52938	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.570461035 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.570508003 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.570585966 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.570709944 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.570723057 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.590804100 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.590931892 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.590971947 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.591011047 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.591183901 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.591201067 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.591218948 CEST	52939	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.591226101 CEST	443	52939	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.593431950 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.593466997 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:15.593553066 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.593708038 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:15.593719959 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.161873102 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.165404081 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.165440083 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.167520046 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.167534113 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.192846060 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.193589926 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.193660975 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.194094896 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.194111109 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.216847897 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.217363119 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.217415094 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.218782902 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.218799114 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.235114098 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.236083031 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.236113071 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.236505985 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.236510992 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.265042067 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.265149117 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.265419960 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.265419960 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.265538931 CEST	52940	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.265578985 CEST	443	52940	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.268455029 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.268556118 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.268706083 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.268882990 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.268919945 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.294887066 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.294960022 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.295061111 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.295242071 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.295242071 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.295242071 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.295242071 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.295348883 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.298834085 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.298867941 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.298969030 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.299195051 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.299226046 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.320111990 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.320266962 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.320385933 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.320477962 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.320477962 CEST	52943	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.320502996 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.320516109 CEST	443	52943	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.322912931 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.322949886 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.323131084 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.323131084 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.323160887 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.338418007 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.338577986 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.338907003 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.338907957 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.339667082 CEST	52942	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.339710951 CEST	443	52942	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.340862989 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.340941906 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.341067076 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.341144085 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.341172934 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.603121996 CEST	52941	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.603199959 CEST	443	52941	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.616539955 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.617633104 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.617633104 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.617672920 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.617690086 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.719885111 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.720092058 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.720222950 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.720359087 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.720390081 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.720431089 CEST	52944	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.720438004 CEST	443	52944	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.723546028 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.723628044 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.724059105 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.724059105 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.724144936 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.919756889 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.920527935 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.920583963 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.920898914 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.920913935 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.967133999 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.967767954 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.967806101 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.968462944 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.968477011 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.994059086 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.994680882 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.994704008 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:16.995266914 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:16.995271921 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.018758059 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.018841028 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.018949032 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.019198895 CEST	52945	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.019233942 CEST	443	52945	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.023108959 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.023220062 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.023308039 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.023521900 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.023555994 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.068788052 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.068943977 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.069169044 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.069264889 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.069293022 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.069318056 CEST	52946	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.069334030 CEST	443	52946	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.072860956 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.072892904 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.073014021 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.073213100 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.073224068 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.094062090 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.094188929 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.094294071 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.094353914 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.094364882 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.094374895 CEST	52948	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.094378948 CEST	443	52948	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.097526073 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.097642899 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.097734928 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.097893000 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.097919941 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.604979992 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.605887890 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.605925083 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.606427908 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.606443882 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703219891 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703263044 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703308105 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.703319073 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703350067 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703412056 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.703641891 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.703655958 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.703669071 CEST	52949	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.703674078 CEST	443	52949	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.707200050 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.707221031 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.707308054 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.707482100 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.707488060 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.789475918 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.789657116 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.790302038 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.790333033 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.790338993 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.790365934 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.791059017 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.791059971 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.791064024 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.791069984 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.792169094 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.792464018 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.792488098 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.792893887 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.792898893 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.792916059 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.793229103 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.793256998 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.793617010 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.793622017 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.887595892 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.887878895 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.887969017 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888053894 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888071060 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.888098955 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.888129950 CEST	52952	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888145924 CEST	443	52952	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.888402939 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.888468027 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888506889 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888525963 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.888535976 CEST	52950	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.888541937 CEST	443	52950	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.891558886 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.891609907 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.891823053 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.891833067 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.891849995 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.891901016 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.892014980 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.892044067 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.892066002 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.892076969 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.892786026 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.893132925 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.893215895 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.893224001 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.893250942 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.893312931 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.893440962 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.893450022 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.893481016 CEST	52951	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.893485069 CEST	443	52951	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895358086 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895456076 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895504951 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.895526886 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895577908 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895639896 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.895704031 CEST	52956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.895735025 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.895746946 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895760059 CEST	52947	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.895760059 CEST	443	52956	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895764112 CEST	443	52947	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.895879030 CEST	52956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.896195889 CEST	52956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.896214008 CEST	443	52956	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.897664070 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.897700071 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:17.897912025 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.898015022 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:17.898025990 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.351316929 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.352024078 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.352044106 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.352561951 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.352566004 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.457086086 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.457165956 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.457277060 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.457313061 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.457343102 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.457700968 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.457711935 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.457747936 CEST	52953	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.457752943 CEST	443	52953	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.461467028 CEST	52958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.461508036 CEST	443	52958	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.461723089 CEST	52958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.461942911 CEST	52958	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.461955070 CEST	443	52958	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.526272058 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.527147055 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.527158022 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.527410030 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.527789116 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.527815104 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.527820110 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.527823925 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.528395891 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.528410912 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.549118996 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.549806118 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.549818993 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.550718069 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.550724030 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.582233906 CEST	443	52956	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.582921982 CEST	52956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.582933903 CEST	443	52956	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.583770037 CEST	52956	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.583777905 CEST	443	52956	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.625816107 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626092911 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626219988 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.626282930 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.626282930 CEST	52954	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.626319885 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626343966 CEST	443	52954	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626534939 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626559973 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626646042 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.626693010 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.626693010 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.627662897 CEST	52955	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.627691031 CEST	443	52955	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.630563974 CEST	52959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630563974 CEST	52960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630620956 CEST	443	52959	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.630630970 CEST	443	52960	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.630717993 CEST	52959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630717993 CEST	52960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630970955 CEST	52959	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630970955 CEST	52960	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.630985975 CEST	443	52959	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.631000996 CEST	443	52960	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.652834892 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.653507948 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.653564930 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.653565884 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.653624058 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.653670073 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.653683901 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.653707981 CEST	52957	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.653712988 CEST	443	52957	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.657241106 CEST	52961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.657263994 CEST	443	52961	13.107.246.45	192.168.2.4
Oct 8, 2024 10:05:18.657345057 CEST	52961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.657531023 CEST	52961	443	192.168.2.4	13.107.246.45
Oct 8, 2024 10:05:18.657541990 CEST	443	52961	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 10:03:51.379568100 CEST	53	55612	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:51.379960060 CEST	53	55359	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:52.364509106 CEST	53	51806	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:52.753726959 CEST	63008	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:52.754339933 CEST	50035	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:52.761683941 CEST	53	63008	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:52.772241116 CEST	53	50035	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:55.442806005 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:55.443123102 CEST	62166	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:55.450340986 CEST	53	62166	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:55.450709105 CEST	53	58127	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:59.114252090 CEST	59724	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:59.114578009 CEST	55119	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:03:59.121844053 CEST	53	59724	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:59.133312941 CEST	53	55119	1.1.1.1	192.168.2.4
Oct 8, 2024 10:03:59.392919064 CEST	53	51124	1.1.1.1	192.168.2.4
Oct 8, 2024 10:04:08.227910042 CEST	138	138	192.168.2.4	192.168.2.255
Oct 8, 2024 10:04:09.517230988 CEST	53	52297	1.1.1.1	192.168.2.4
Oct 8, 2024 10:04:19.127496004 CEST	53	63042	162.159.36.2	192.168.2.4
Oct 8, 2024 10:04:19.615407944 CEST	58912	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:04:19.626756907 CEST	53	58912	1.1.1.1	192.168.2.4
Oct 8, 2024 10:04:55.494533062 CEST	49159	53	192.168.2.4	1.1.1.1
Oct 8, 2024 10:04:55.501137972 CEST	53	49159	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 10:03:52.753726959 CEST	192.168.2.4	1.1.1.1	0x387a	Standard query (0)	evicertia.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:03:52.754339933 CEST	192.168.2.4	1.1.1.1	0x4da7	Standard query (0)	evicertia.com	65	IN (0x0001)	false
Oct 8, 2024 10:03:55.442806005 CEST	192.168.2.4	1.1.1.1	0xe7e3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:03:55.443123102 CEST	192.168.2.4	1.1.1.1	0x5d99	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 10:03:59.114252090 CEST	192.168.2.4	1.1.1.1	0xb957	Standard query (0)	evicertia.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:03:59.114578009 CEST	192.168.2.4	1.1.1.1	0x93a2	Standard query (0)	evicertia.com	65	IN (0x0001)	false
Oct 8, 2024 10:04:19.615407944 CEST	192.168.2.4	1.1.1.1	0x2d8a	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 8, 2024 10:04:55.494533062 CEST	192.168.2.4	1.1.1.1	0x135d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 10:03:52.761683941 CEST	1.1.1.1	192.168.2.4	0x387a	No error (0)	evicertia.com		94.103.116.70	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:03:55.450340986 CEST	1.1.1.1	192.168.2.4	0x5d99	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 10:03:55.450709105 CEST	1.1.1.1	192.168.2.4	0xe7e3	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:03:59.121844053 CEST	1.1.1.1	192.168.2.4	0xb957	No error (0)	evicertia.com		94.103.116.70	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:04:06.291510105 CEST	1.1.1.1	192.168.2.4	0xaf93	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 10:04:06.291510105 CEST	1.1.1.1	192.168.2.4	0xaf93	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:04:19.626756907 CEST	1.1.1.1	192.168.2.4	0x2d8a	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 8, 2024 10:04:45.727169991 CEST	1.1.1.1	192.168.2.4	0x74bd	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 10:04:45.727169991 CEST	1.1.1.1	192.168.2.4	0x74bd	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 8, 2024 10:04:55.501137972 CEST	1.1.1.1	192.168.2.4	0x135d	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

evicertia.com

fs.microsoft.com

https:

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:53 UTC	701	OUT	GET /Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 08:03:54 UTC	741	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 34 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 44 65 6c 69 76 65 72 79 2f 53 74 61 72 74 3f 64 65 6c 69 76 65 72 79 49 64 3d 30 31 39 32 34 37 65 37 2d 33 30 37 62 2d 34 64 37 39 2d 62 66 39 39 2d 61 33 30 30 63 64 31 66 36 64 39 37 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 39 35 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 73 65 74 2d 63 6f 6f Data Ascii: HTTP/1.0 302 Founddate: Tue, 08 Oct 2024 08:03:54 GMTlocation: /Public/EviNotice/Delivery/Start?deliveryId=019247e7-307b-4d79-bf99-a300cd1f6d97x-aspnet-version: 4.0.30319content-length: 195cache-control: privatecontent-type: text/htmlset-coo
2024-10-08 08:03:54 UTC	195	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 44 65 6c 69 76 65 72 79 2f 53 74 61 72 74 3f 64 65 6c 69 76 65 72 79 49 64 3d 30 31 39 32 34 37 65 37 2d 33 30 37 62 2d 34 64 37 39 2d 62 66 39 39 2d 61 33 30 30 63 64 31 66 36 64 39 37 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Public/EviNotice/Delivery/Start?deliveryId=019247e7-307b-4d79-bf99-a300cd1f6d97">here</a></h2></body><html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:54 UTC	787	OUT	GET /Public/EviNotice/Delivery/Start?deliveryId=019247e7-307b-4d79-bf99-a300cd1f6d97 HTTP/1.1 Host: evicertia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:54 UTC	642	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 34 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 43 75 73 74 6f 64 79 3f 75 6e 69 71 75 65 49 64 3d 30 31 39 32 34 37 65 37 2d 33 30 37 62 2d 34 34 36 61 2d 61 64 39 63 2d 39 37 32 37 63 30 33 39 33 31 65 37 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 38 36 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 34 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d Data Ascii: HTTP/1.0 302 Founddate: Tue, 08 Oct 2024 08:03:54 GMTlocation: /Public/EviNotice/Custody?uniqueId=019247e7-307b-446a-ad9c-9727c03931e7x-aspnet-version: 4.0.30319content-length: 186expires: Tue, 08 Oct 2024 08:03:54 GMTcache-control: private, m
2024-10-08 08:03:54 UTC	186	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 43 75 73 74 6f 64 79 3f 75 6e 69 71 75 65 49 64 3d 30 31 39 32 34 37 65 37 2d 33 30 37 62 2d 34 34 36 61 2d 61 64 39 63 2d 39 37 32 37 63 30 33 39 33 31 65 37 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Public/EviNotice/Custody?uniqueId=019247e7-307b-446a-ad9c-9727c03931e7">here</a></h2></body><html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:55 UTC	778	OUT	GET /Public/EviNotice/Custody?uniqueId=019247e7-307b-446a-ad9c-9727c03931e7 HTTP/1.1 Host: evicertia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:56 UTC	640	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 35 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 43 75 73 74 6f 64 79 2f 30 31 39 32 36 62 32 37 2d 66 64 61 31 2d 34 39 33 31 2d 38 63 62 36 2d 64 64 62 34 32 30 63 64 39 35 66 39 2f 41 63 63 65 73 73 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 38 34 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 35 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 Data Ascii: HTTP/1.0 302 Founddate: Tue, 08 Oct 2024 08:03:55 GMTlocation: /Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Accessx-aspnet-version: 4.0.30319content-length: 184expires: Tue, 08 Oct 2024 08:03:55 GMTcache-control: private, max
2024-10-08 08:03:56 UTC	184	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 50 75 62 6c 69 63 2f 45 76 69 4e 6f 74 69 63 65 2f 43 75 73 74 6f 64 79 2f 30 31 39 32 36 62 32 37 2d 66 64 61 31 2d 34 39 33 31 2d 38 63 62 36 2d 64 64 62 34 32 30 63 64 39 35 66 39 2f 41 63 63 65 73 73 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access">here</a></h2></body><html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 08:03:56 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=117706 Date: Tue, 08 Oct 2024 08:03:56 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:56 UTC	776	OUT	GET /Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access HTTP/1.1 Host: evicertia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:57 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 37 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 6d 76 63 2d 76 65 72 73 69 6f 6e 3a 20 35 2e 32 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 64 65 6e 79 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 37 39 36 0d 0a 65 78 70 69 72 65 73 3a 20 2d 31 0d 0a 70 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 70 72 6f 78 79 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:03:57 GMTx-aspnetmvc-version: 5.2x-frame-options: denyx-aspnet-version: 4.0.30319content-length: 3796expires: -1pragma: no-cachecache-control: no-cache, must-revalidate,proxy-revalidatecontent-typ
2024-10-08 08:03:57 UTC	1116	IN	Data Raw: 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="Description"
2024-10-08 08:03:57 UTC	2680	IN	Data Raw: 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 72 6f 77 20 62 67 2d 77 68 69 74 65 20 65 76 69 2d 61 63 74 69 6f 6e 2d 62 61 72 20 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 20 70 6f 73 69 74 69 6f 6e 2d 66 69 78 65 64 20 62 6f 74 74 6f 6d 2d 30 20 7a 2d 33 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 20 70 2d 33 20 70 78 2d 6d 64 2d 35 20 64 2d 66 6c 65 78 20 66 6c 65 78 2d 72 6f 77 2d 72 65 76 65 72 73 65 20 67 61 70 2d 32 20 67 61 70 2d 6d 64 2d 34 20 62 6f 72 64 65 72 2d 74 6f 70 22 3e 0a 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 22 20 66 6f 72 6d 3d 22 65 76 69 6e 6f 74 69 63 65 2d 63 75 73 74 6f 64 79 2d 61 63 63 65 73 73 2d 66 6f 72 6d 22 20 69 64 3d 22 41 63 74 69 6f 6e 5f 43 6f 6e 74 69 6e 75 Data Ascii: section class="row bg-white evi-action-bar container-md position-fixed bottom-0 z-3"><div class="col p-3 px-md-5 d-flex flex-row-reverse gap-2 gap-md-4 border-top"><button class="btn btn-primary " form="evinotice-custody-access-form" id="Action_Continu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:57 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 08:03:57 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=117641 Date: Tue, 08 Oct 2024 08:03:57 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-08 08:03:57 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:58 UTC	706	OUT	GET /bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:58 UTC	558	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 32 36 30 34 30 36 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 38 20 4f 63 74 20 32 30 32 35 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:03:58 GMTx-aspnet-version: 4.0.30319content-length: 260406expires: Wed, 08 Oct 2025 08:03:58 GMTcache-control: publiclast-modified: Tue, 08 Oct 2024 08:03:58 GMTcontent-type: text/cssx-content-type-
2024-10-08 08:03:58 UTC	1145	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 Data Ascii: @font-face{font-family:"Open Sans";font-style:italic;font-display:swap;font-weight:300;unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U
2024-10-08 08:03:58 UTC	4344	IN	Data Raw: 2c 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6c 61 74 69 6e 2d 34 30 30 2d 69 74 61 6c 69 63 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 Data Ascii: ,url("/Content/Fonts/open-sans-latin-400-italic.woff") format("woff")}@font-face{font-family:"Open Sans";font-style:normal;font-display:swap;font-weight:400;unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 69 6e 2d 65 78 74 2d 33 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6c 61 74 69 6e 2d 65 78 74 2d 33 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 Data Ascii: in-ext-300-normal.woff2") format("woff2"),url("/Content/Fonts/open-sans-latin-ext-300-normal.woff") format("woff")}@font-face{font-family:"Open Sans";font-style:italic;font-display:swap;font-weight:400;unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00
2024-10-08 08:03:58 UTC	184	IN	Data Raw: 46 46 3b 73 72 63 3a 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6c 61 74 69 6e 2d 65 78 74 2d 35 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6c 61 74 69 6e 2d 65 78 74 2d 35 30 30 2d 6e 6f 72 6d 61 6c 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 Data Ascii: FF;src:url("/Content/Fonts/open-sans-latin-ext-500-normal.woff2") format("woff2"),url("/Content/Fonts/open-sans-latin-ext-500-normal.woff") format("woff")}@font-face{font-family:"Open
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 46 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 73 72 63 3a 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2d 6c 61 74 69 6e 2d 65 78 74 2d 36 30 30 2d 69 74 61 6c 69 63 2e 77 6f 66 66 32 22 29 20 66 Data Ascii: Sans";font-style:italic;font-display:swap;font-weight:600;unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF;src:url("/Content/Fonts/open-sans-latin-ext-600-italic.woff2") f
2024-10-08 08:03:58 UTC	2896	IN	Data Raw: 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 46 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 73 72 63 3a 75 72 6c 28 22 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f Data Ascii: at("woff")}@font-face{font-family:"Open Sans";font-style:italic;font-display:swap;font-weight:800;unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF;src:url("/Content/Fonts/
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 63 6f 6e 66 69 67 2d 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 32 2e 35 35 33 31 39 31 34 38 39 34 25 20 37 38 2e 34 39 34 36 32 33 36 35 35 39 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 63 6f 6e 66 69 67 2d 61 63 74 69 76 65 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 63 6f 6e 73 75 6d 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 33 2e 31 39 31 34 38 39 33 36 31 37 25 20 37 38 2e 34 39 34 36 32 33 36 35 35 39 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 63 6f 6e 73 75 6d 70 74 69 6f 6e 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 Data Ascii: 0px}.evi-icon-config-active{background-position:42.5531914894% 78.4946236559%}.evi-icon-config-active-size{width:40px;height:40px}.evi-icon-consumption{background-position:53.1914893617% 78.4946236559%}.evi-icon-consumption-size{width:40px;height:40px}.ev
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 65 76 69 6e 6f 74 69 63 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 38 39 2e 32 34 37 33 31 31 38 32 38 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 65 76 69 6e 6f 74 69 63 65 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 65 76 69 70 6f 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 2e 36 33 38 32 39 37 38 37 32 33 25 20 38 39 2e 32 34 37 33 31 31 38 32 38 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 65 76 69 70 6f 73 74 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 65 76 69 Data Ascii: e{width:40px;height:40px}.evi-icon-evinotice{background-position:0 89.247311828%}.evi-icon-evinotice-size{width:40px;height:40px}.evi-icon-evipost{background-position:10.6382978723% 89.247311828%}.evi-icon-evipost-size{width:40px;height:40px}.evi-icon-evi
2024-10-08 08:03:58 UTC	2896	IN	Data Raw: 76 69 2d 69 63 6f 6e 2d 6c 6f 63 6b 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 33 36 2e 31 30 33 31 35 31 38 36 32 35 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 6c 6f 63 6b 65 72 2d 73 69 7a 65 7b 77 69 64 74 68 3a 31 31 32 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 6d 65 6e 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 20 32 31 2e 35 30 35 33 37 36 33 34 34 31 25 7d 2e 65 76 69 2d 69 63 6f 6e 2d 6d 65 6e 75 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 76 69 2d 69 63 6f 6e 2d 6e 65 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 20 33 32 2e 32 35 38 30 36 34 35 31 36 31 25 7d 2e 65 76 69 2d Data Ascii: vi-icon-locker{background-position:0 36.1031518625%}.evi-icon-locker-size{width:112px;height:63px}.evi-icon-menu{background-position:100% 21.5053763441%}.evi-icon-menu-size{width:40px;height:40px}.evi-icon-new{background-position:100% 32.2580645161%}.evi-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:58 UTC	693	OUT	GET /bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:58 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 34 33 32 36 31 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 38 20 4f 63 74 20 32 30 32 35 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 78 2d 63 6f 6e 74 65 6e Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:03:58 GMTx-aspnet-version: 4.0.30319content-length: 143261expires: Wed, 08 Oct 2025 08:03:58 GMTcache-control: publiclast-modified: Tue, 08 Oct 2024 08:03:58 GMTcontent-type: text/javascriptx-conten
2024-10-08 08:03:58 UTC	1138	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-10-08 08:03:58 UTC	5976	IN	Data Raw: 61 2e 68 65 69 67 68 74 29 2f 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 31 29 3b 76 61 72 20 75 3d 28 6e 28 65 29 3f 74 28 65 29 3a 77 69 6e 64 6f 77 29 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2c 6c 3d 21 63 28 29 26 26 69 2c 64 3d 28 61 2e 6c 65 66 74 2b 28 6c 26 26 75 3f 75 2e 6f 66 66 73 65 74 4c 65 66 74 3a 30 29 29 2f 66 2c 68 3d 28 61 2e 74 6f 70 2b 28 6c 26 26 75 3f 75 2e 6f 66 66 73 65 74 54 6f 70 3a 30 29 29 2f 70 2c 6d 3d 61 2e 77 69 64 74 68 2f 66 2c 76 3d 61 2e 68 65 69 67 68 74 2f 70 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 6d 2c 68 65 69 67 68 74 3a 76 2c 74 6f 70 3a 68 2c 72 69 67 68 74 3a 64 2b 6d 2c 62 6f 74 74 6f 6d 3a 68 2b 76 2c 6c 65 66 74 3a 64 2c 78 3a 64 2c 79 3a 68 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 Data Ascii: a.height)/e.offsetHeight\|\|1);var u=(n(e)?t(e):window).visualViewport,l=!c()&&i,d=(a.left+(l&&u?u.offsetLeft:0))/f,h=(a.top+(l&&u?u.offsetTop:0))/p,m=a.width/f,v=a.height/p;return{width:m,height:v,top:h,right:d+m,bottom:h+v,left:d,x:d,y:h}}function u(e){va
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 65 67 79 3a 22 61 62 73 6f 6c 75 74 65 22 2c 70 6c 61 63 65 6d 65 6e 74 3a 69 7d 29 2c 57 3d 4e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 4f 2c 4d 29 29 2c 42 3d 6d 3d 3d 3d 54 3f 57 3a 50 2c 52 3d 7b 74 6f 70 3a 45 2e 74 6f 70 2d 42 2e 74 6f 70 2b 78 2e 74 6f 70 2c 62 6f 74 74 6f 6d 3a 42 2e 62 6f 74 74 6f 6d 2d 45 2e 62 6f 74 74 6f 6d 2b 78 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 45 2e 6c 65 66 74 2d 42 2e 6c 65 66 74 2b 78 2e 6c 65 66 74 2c 72 69 67 68 74 3a 42 2e 72 69 67 68 74 2d 45 2e 72 69 67 68 74 2b 78 2e 72 69 67 68 74 7d 2c 53 3d 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 6f 66 66 73 65 74 3b 69 66 28 6d 3d 3d 3d 54 26 26 53 29 7b 76 61 Data Ascii: =X({reference:P,element:O,strategy:"absolute",placement:i}),W=N(Object.assign({},O,M)),B=m===T?W:P,R={top:E.top-B.top+x.top,bottom:B.bottom-E.bottom+x.bottom,left:E.left-B.left+x.left,right:B.right-E.right+x.right},S=e.modifiersData.offset;if(m===T&&S){va
2024-10-08 08:03:58 UTC	4344	IN	Data Raw: 74 61 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2e 64 61 74 61 2c 74 2e 64 61 74 61 29 7d 29 3a 74 2c 65 7d 29 2c 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 70 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 5b 65 5d 7d 29 29 29 29 3b 72 65 74 75 72 6e 20 66 2e 6f 72 64 65 72 65 64 4d 6f 64 69 66 69 65 72 73 3d 64 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 6e 61 62 6c 65 64 7d 29 29 2c 66 2e 6f 72 64 65 72 65 64 4d 6f 64 69 66 69 65 72 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 61 6d 65 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 2c 6f 3d 65 2e 65 66 66 65 Data Ascii: ta:Object.assign({},n.data,t.data)}):t,e}),{}),Object.keys(p).map((function(e){return p[e]}))));return f.orderedModifiers=d.filter((function(e){return e.enabled})),f.orderedModifiers.forEach((function(e){var t=e.name,n=e.options,r=void 0===n?{}:n,o=e.effe
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6f 5b 65 5d 3b 21 31 3d 3d 3d 74 3f 69 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 3a 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 21 30 3d 3d 3d 74 3f 22 22 3a 74 29 7d 29 29 29 7d 29 29 7d 2c 65 66 66 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 2c 6e 3d 7b 70 6f 70 70 65 72 3a 7b 70 6f 73 69 74 69 6f 6e 3a 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 2c 6c 65 66 74 3a 22 30 22 2c 74 6f 70 3a 22 30 22 2c 6d 61 72 67 69 6e 3a 22 30 22 7d 2c 61 72 72 6f 77 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 2c 72 65 66 65 72 65 6e 63 65 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 65 6c 65 6d Data Ascii: tion(e){var t=o[e];!1===t?i.removeAttribute(e):i.setAttribute(e,!0===t?"":t)})))}))},effect:function(e){var t=e.state,n={popper:{position:t.options.strategy,left:"0",top:"0",margin:"0"},arrow:{position:"absolute"},reference:{}};return Object.assign(t.elem
2024-10-08 08:03:58 UTC	5792	IN	Data Raw: 70 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 73 74 61 72 74 7c 65 6e 64 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 5b 65 5d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 76 61 72 20 6e 3d 74 2c 72 3d 6e 2e 70 6c 61 63 65 6d 65 6e 74 2c 6f 3d 6e 2e 62 6f 75 6e 64 61 72 79 2c 69 3d 6e 2e 72 6f 6f 74 42 6f 75 6e 64 61 72 79 2c 61 3d 6e 2e 70 61 64 64 69 6e 67 2c 73 3d 6e 2e 66 6c 69 70 56 61 72 69 61 74 69 6f 6e 73 2c 66 3d 6e 2e 61 6c 6c 6f 77 65 64 41 75 74 6f 50 6c 61 63 65 6d 65 6e 74 73 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 53 3a 66 2c 70 3d 55 28 72 29 2c 75 3d 70 3f 73 3f 52 3a 52 2e 66 69 6c 74 65 72 28 28 66 75 6e Data Ascii: pe(e){return e.replace(/start\|end/g,(function(e){return ce[e]}))}function ue(e,t){void 0===t&&(t={});var n=t,r=n.placement,o=n.boundary,i=n.rootBoundary,a=n.padding,s=n.flipVariations,f=n.allowedAutoPlacements,c=void 0===f?S:f,p=U(r),u=p?s?R:R.filter((fun
2024-10-08 08:03:58 UTC	2896	IN	Data Raw: 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 Data Ascii: 2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"object"==typeof exports&&
2024-10-08 08:03:58 UTC	2896	IN	Data Raw: 31 65 33 2a 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 29 28 65 29 2b 35 3b 6c 65 74 20 6e 3d 21 31 3b 63 6f 6e 73 74 20 72 3d 28 7b 74 61 72 67 65 74 3a 69 7d 29 3d 3e 7b 69 3d 3d 3d 65 26 26 28 6e 3d 21 30 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6f 2c 72 29 2c 76 28 74 29 29 7d 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6f 2c 72 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 6e 7c 7c 61 28 65 29 7d 29 2c 73 29 7d 2c 77 3d 28 74 2c 65 2c 69 2c 73 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f Data Ascii: 1e3*(Number.parseFloat(e)+Number.parseFloat(i))):0})(e)+5;let n=!1;const r=({target:i})=>{i===e&&(n=!0,e.removeEventListener(o,r),v(t))};e.addEventListener(o,r),setTimeout((()=>{n\|\|a(e)}),s)},w=(t,e,i,s)=>{const n=t.length;let o=t.indexOf(e);return-1===o?
2024-10-08 08:03:58 UTC	1448	IN	Data Raw: 29 3b 6c 65 74 20 6e 3d 6e 75 6c 6c 2c 6f 3d 21 30 2c 72 3d 21 30 2c 61 3d 21 31 3b 65 21 3d 3d 4d 28 65 29 26 26 73 26 26 28 6e 3d 73 2e 45 76 65 6e 74 28 65 2c 69 29 2c 73 28 74 29 2e 74 72 69 67 67 65 72 28 6e 29 2c 6f 3d 21 6e 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 6e 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 46 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 Data Ascii: );let n=null,o=!0,r=!0,a=!1;e!==M(e)&&s&&(n=s.Event(e,i),s(t).trigger(n),o=!n.isPropagationStopped(),r=!n.isImmediatePropagationStopped(),a=n.isDefaultPrevented());const l=F(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:03:58 UTC	702	OUT	GET /Master/Logo HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:03:58 UTC	609	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 33 3a 35 38 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 6d 76 63 2d 76 65 72 73 69 6f 6e 3a 20 35 2e 32 0d 0a 65 74 61 67 3a 20 61 33 38 37 36 30 32 39 33 66 62 62 62 34 35 37 39 32 35 33 33 62 64 63 39 66 31 34 39 36 31 63 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 64 65 6e 79 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 36 34 37 36 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 33 30 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 72 6f 78 79 2d 72 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:03:58 GMTx-aspnetmvc-version: 5.2etag: a38760293fbbb45792533bdc9f14961cx-frame-options: denyx-aspnet-version: 4.0.30319content-length: 6476cache-control: private, max-age=300, must-revalidate, proxy-r
2024-10-08 08:03:58 UTC	1094	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 64 08 06 00 00 00 3c 01 0d c0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 e1 49 44 41 54 78 01 ed 9d 4d 76 dc 46 92 80 23 51 72 8b 3d 1b 97 ec ee f7 24 7b a1 d4 09 44 9d 40 c5 13 88 5a 5a 5e 88 b4 c7 b3 15 79 02 91 27 20 b5 1d 3f 0f c9 85 ed 79 b3 11 75 02 c3 27 10 75 02 c3 8b 69 f9 bd b6 ac f2 a6 45 4a 2a 64 47 44 26 aa 50 55 48 fc 11 a8 3f c5 f7 5e b1 8a 40 16 90 05 24 22 23 23 23 23 00 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 16 00 05 42 6d ba 9f eb 75 35 80 03 fc d8 cb da 6f 3a Data Ascii: PNGIHDR,d<pHYssRGBgAMAaIDATxMvF#Qr=${D@ZZ^y' ?yu'uiEJ*dGD&PUH?^@$"####AAAAAAAAAAAAAAABmu5o:
2024-10-08 08:03:58 UTC	4344	IN	Data Raw: 47 58 af b3 55 9b 1d 76 1d f5 1e cc 07 4d ed 0c db db 86 4f 68 e5 ce 12 92 36 f5 c9 0d 7d 40 3e 48 c6 fe 08 0d 0d 57 90 1a 25 ca ae 9f c8 0e 40 82 02 16 00 e7 c6 a0 7d fb 55 4a 75 cd ab 73 27 2e 7e c0 29 14 08 69 12 30 07 e8 da d3 fd cd 2b 33 0c 54 38 bf 19 2f b2 c7 3c 65 83 ef 22 81 d7 a3 c8 dd 65 19 89 e7 fd 9b f0 ba ba c0 98 99 78 35 2c 6e a8 e7 f0 d3 0c 57 7e f7 b0 61 3e c7 07 78 7b 9e eb f1 ca b8 31 4c aa e0 97 39 57 1c c3 01 cc 11 63 60 07 ed 52 cf 7c 1a ae 33 de 6a 98 27 68 3c 0e ce 71 c8 dd 64 cf 6f 8d ea dd d4 e7 64 d8 a9 cb 1e 82 ec 8c 28 48 77 71 d4 11 42 9d a1 f2 f8 79 6b 81 02 26 84 86 a0 48 24 50 f4 fb 6d 9d cf 94 1d 6a 57 82 65 89 35 23 ad 17 14 d5 a4 e9 bd ca 88 7a 72 c5 5f 2f 18 9f f9 98 05 d8 80 c8 6e 84 2a 61 34 af 20 63 2e 92 a8 97 86 Data Ascii: GXUvMOh6}@>HW%@}UJus'.~)i0+3T8/<e"ex5,nW~a>x{1L9Wc`R\|3j'h<qdod(HwqByk&H$PmjWe5#zr_/n*a4 c.
2024-10-08 08:03:58 UTC	1038	IN	Data Raw: ea 40 31 ca 0d 67 4a d7 79 51 75 d1 4e 44 c3 aa 87 3c 63 38 c8 3f 64 6c 0d e7 70 65 50 33 14 75 55 46 f6 cb 61 e6 e9 81 4d e8 1a e2 e7 17 4e 0b 7a 96 99 0e b0 a4 c0 a4 d0 e8 f8 9b 0e 48 10 92 0d 0c 05 e4 3d 3c de e9 eb 9c 0e 55 86 84 2b 44 27 89 2b af 38 e3 70 38 f6 32 36 f1 81 21 83 70 2d d4 f6 68 68 98 91 9d 99 9c 49 e3 f8 d0 3a 56 b2 4d 6a 9b 6d 41 30 d8 80 45 85 66 15 49 58 59 c1 14 b1 0d eb af c1 35 1e 46 42 fd 2c 46 c6 69 49 41 7e 16 6b 18 ce 04 7e 84 e7 4e 32 c4 a8 6c 81 14 38 e1 99 95 49 e6 52 bc 9b 16 ca 6e d8 a9 93 fb 4d 93 38 64 5b 43 c1 7a 87 ed 62 68 9b 72 43 ce 10 2e c3 55 1a 8a 43 3f 26 cd df da cb 28 77 44 ee 44 85 68 58 2b 44 6c 7b 3b ca c0 73 3f 6b ff 35 e7 ee 90 f4 68 50 05 b2 ed 7c ff 1d 19 e0 b3 ed 60 4a f5 86 d9 71 95 ba 8f f6 a7 88 Data Ascii: @1gJyQuND<c8?dlpeP3uUFaMNzH=<U+D'+8p826!p-hhI:VMjmA0EfIXY5FB,FiIA~k~N2l8IRnM8d[CzbhrC.UC?&(wDDhX+Dl{;s?k5hP\|`Jq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:00 UTC	696	OUT	GET /Content/Fonts/open-sans-latin-500-normal.woff2 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://evicertia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:00 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 31 20 4f 63 74 20 32 30 32 34 20 31 34 3a 34 32 3a 33 33 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 38 37 34 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 66 65 72 72 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:00 GMTlast-modified: Tue, 01 Oct 2024 14:42:33 GMTx-aspnet-version: 4.0.30319content-length: 18740cache-control: privatecontent-type: application/octet-streamx-content-type-options: nosniffreferr
2024-10-08 08:04:00 UTC	2617	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 49 34 00 12 00 00 00 00 8b 44 00 00 48 c9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 08 1b 90 22 1c 86 68 06 60 3f 53 54 41 54 5a 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 10 81 9b 3d 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 85 16 07 89 1f 0c 85 1f 1b 06 7b 17 c4 5d 3b 17 e5 76 20 9e 8f 5c 56 14 45 b0 71 00 50 84 07 47 11 6c 1c 20 18 df a5 b2 ff ff bf 27 50 19 b2 75 48 5a 0e 7a 55 8b ce 76 17 d7 0a 57 34 b2 ac 2b b5 a3 27 62 39 56 db a6 0e 96 dd 3f 49 e7 79 93 d4 42 5e 13 c7 2d 74 2f 5b 99 e1 8c 3f 05 a5 b1 b8 39 65 49 c3 60 f4 1e 5c 95 77 28 10 c4 1f c5 69 fd 1d a6 bb b8 84 2d 56 d3 1e 86 de 8a a2 f7 a3 6e f9 ed 72 7f 68 61 f8 a2 0d 0d 0d b2 85 14 e8 7f b5 4c cc ac 47 68 ec 93 5c 82 c8 ee Data Ascii: wOF2I4DH"h`?STATZ0\|=26$` {];v \VEqPGl 'PuHZzUvW4+'b9V?IyB^-t/[?9eI`\w(i-VnrhaLGh\
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 5e ef be 9a 4e 46 c3 97 2f 9e 3f 1b f4 7b dd 4e fb ea 85 ea 98 b7 a1 2c e7 fc 90 9f 2c 8f 6d 6c 15 65 3f 77 d6 c7 37 16 8e 49 9d 10 ee 8d 41 97 23 d8 91 d8 c1 58 ea a7 c6 5a 6f d8 c2 82 eb fa b0 33 2e 34 ba d3 f1 42 59 0c 78 70 1e be dc 60 c2 83 51 23 54 eb 34 58 56 3d 35 b8 af f7 a6 db ee 12 a0 30 26 d1 e8 fc 7c 19 6c 12 57 b4 b9 04 b4 05 51 97 09 d0 ad c9 91 04 4c 73 a3 d6 24 bc ac 2e c2 1f 23 e8 72 9e 51 72 6c 59 96 b2 82 24 21 5f 3b 0d 4f d6 c6 7c bd 52 75 40 21 e5 79 50 a2 b3 a2 d7 9c 11 05 8d 40 4d af 7c 57 38 0a a4 d1 d6 db 8c 49 86 9d c1 c7 e3 35 0a 50 11 11 1c cd b3 a1 68 6d 8a d3 6c ce 43 63 e1 a5 8b 46 6b 03 4b de e7 ec 37 59 59 d7 3b 64 a7 95 08 ea 52 80 cf 7b 92 2d 9f f7 35 92 e7 41 aa 9e f7 cb 4f 42 0a c3 63 9f 56 f1 16 43 54 d0 06 08 20 ac Data Ascii: ^NF/?{N,,mle?w7IA#XZo3.4BYxp`Q#T4XV=50&\|lWQLs$.#rQrlY$!_;O\|Ru@!yP@M\|W8I5PhmlCcFkK7YY;dR{-5AOBcVCT
2024-10-08 08:04:00 UTC	3080	IN	Data Raw: c6 cf 74 42 bd de 54 0e 54 1c 1c 81 6f a8 02 d3 b7 79 e9 98 b3 74 53 ad fb aa ad ae 09 08 42 83 9a e4 5c 3f c0 c9 0d 40 b9 88 2c 5f 27 8c e8 45 02 77 5d cf 3b a0 89 2c e4 2e 7a 24 47 9d 44 b6 84 a3 85 6f 7e c3 9e 0a 13 7e 88 5c 98 ba 40 58 72 3d e1 cf ba 01 a1 bf fd ef 6e 5e 06 d7 4c 09 88 97 01 96 33 b8 0d e9 f2 5c df 21 87 eb 19 86 1c 33 4e 2c bc 0a 4d e5 1b 70 29 f9 3f 32 50 4c 0d 63 df a5 f9 b7 61 4f a8 df fd e7 5d 94 eb 7e 93 ac 7c f8 ad e0 b3 bb a2 0f 11 3c 2c 03 6f 3a 1c 93 aa 48 42 36 a3 85 4b 6a 52 2c b8 f1 c0 e7 30 ce b6 f5 06 e3 c4 f8 c2 26 8d 70 45 e5 81 e2 40 c5 5c c6 5e 62 f8 84 c0 b5 14 8a 6f 79 e0 74 ce fe 10 57 85 9e cf ed bc e7 4c 55 a9 6a ab 6c 85 69 0b 80 45 3c 61 ad 9d af f8 da 7a 65 e0 18 0c b6 b2 6b 5f 92 e0 00 e5 45 27 28 69 9b 80 Data Ascii: tBTToytSB\?@,_'Ew];,.z$GDo~~\@Xr=n^L3\!3N,Mp)?2PLcaO]~\|<,o:HB6KjR,0&pE@\^boytWLUjliE<azek_E'(i
2024-10-08 08:04:00 UTC	4344	IN	Data Raw: 49 ea 6b 92 27 7b ff 4e cf 74 c9 27 08 93 3b 16 68 a0 1a 4b ac 7d 2a 03 cd c7 e5 f6 55 97 e6 cf 53 ee c3 60 3a cc 2c 36 0b 47 2e c0 e0 65 a1 99 05 4c 32 2f da 89 99 7f 71 34 99 ee b3 61 21 75 48 61 91 b2 e3 74 d7 ad df 47 c2 7c 2b 2d 13 2b d6 85 05 75 f0 b0 00 4d 04 fa 70 58 60 ad 59 5a fe 7a 52 79 85 55 98 cf e8 44 78 60 85 75 72 b9 32 ad b8 d6 2a 2c 44 d3 01 0f 43 d5 d5 4a e0 17 24 c8 8f c1 2b 29 8b b1 c3 31 c7 92 3f 04 e7 58 9b 9f 2f 97 d8 d6 c1 1d 64 88 de a1 de 91 e1 91 be a1 be b1 61 9d ca 9f 2f eb 11 7d a6 c2 a7 10 a4 fd b0 48 db 15 c4 bc 06 41 8b 7a 73 f1 ef 45 f5 b6 3c 2a 35 c4 d7 4f de a6 9f ef df ad 35 dd 70 4a a4 8a f2 3c d2 50 b9 07 8b 7c b6 ea 6d 2c 3f 7f 42 50 3b fd 60 25 83 f1 f1 5d 32 e3 fe fa ca cc c3 55 11 c3 bd f2 c3 45 5f 48 59 a5 48 Data Ascii: Ik'{Nt';hK}US`:,6G.eL2/q4a!uHatG\|+-+uMpX`YZzRyUDx`ur2,DCJ$+)1?X/da/}HAzsE<*5O5pJ<P\|m,?BP;`%]2UE_HYH
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: fd 29 35 66 cf 9b b1 56 8d b6 e1 fc 24 1a 1e 9b f9 38 53 51 28 11 c5 c8 e0 9b 1d 94 e6 20 a3 0a 9e 75 f8 a6 34 f7 96 09 23 39 a2 08 98 06 47 37 39 93 51 b8 d0 e5 c9 0a 20 af 6d 38 e4 2f 02 36 8f fb fd 72 84 e6 f4 fb 53 2d f3 a8 a9 58 1f 52 60 4c 14 2a 3a 30 a9 4c 20 49 3e e4 49 b6 c6 0f 46 bb 5c f5 2f bd f2 f0 c2 64 82 7f 65 4e 16 39 30 dc 0b 43 37 61 fa db 2d 77 43 14 1a 26 89 31 d2 bc df 38 ad cc 51 c0 f8 f3 d7 6b ab 77 1c 15 4a e8 32 79 cd 66 d1 e6 0b 99 f2 cb fa cc a1 7c a7 df e0 3d 6d 8f 52 ce 00 6f fa fb 3f 36 c8 71 d3 5f eb 4b fb 97 fa 5b 26 e6 1f be 60 2d b1 6e ae c1 4d e1 26 a7 8a 7f 7b 9f 6f a9 d9 da 37 d1 ff 4b 7f 76 0e 87 c3 8e ca ce 8d 66 31 98 e2 1c 56 14 9b 25 96 b0 39 36 73 a7 4b cd 3b ee 4a 74 e1 b5 95 b3 45 7d 89 fc 78 c4 fa 0c e7 a6 65 Data Ascii: )5fV$8SQ( u4#9G79Q m8/6rS-XR`L*:0L I>IF\/deN90C7a-wC&18QkwJ2yf\|=mRo?6q_K[&`-nM&{o7Kvf1V%96sK;JtE}xe
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: b4 1f 10 6c ad e6 2d 35 0d a2 12 df 5e aa cd c8 36 ec 01 e9 1a dd df 51 4c e5 e4 52 a3 78 9f e9 48 7e 56 94 74 a1 a5 55 d0 16 48 14 53 fd 1d d9 c4 90 cb af 71 5c 5a ce ac 2c fe d3 da 99 f7 b6 7e 74 62 24 93 4e f0 f7 65 53 a8 fb 40 d5 21 11 fe 1e de d4 f0 fe 3e 7c b8 8f 07 ce df 38 f4 35 2c e0 e2 5c c0 c5 d9 80 89 d9 90 e5 7f dc d0 87 30 9e 8b 34 b6 6d 2a b6 e9 54 ff 84 7f a1 a9 d8 e9 31 73 05 6b 55 ee e2 1b fa c8 2d c0 0b 8f f5 a2 04 61 24 8c 40 53 7d 22 23 24 c8 8f 15 42 a4 b2 82 fc 82 18 41 c6 fb 50 0f 68 f1 31 24 3d 0d 41 d1 de 29 aa 16 dd c3 d5 39 c2 da cb b2 8f a3 88 c6 a8 3b 94 d7 24 1b 1a 4d 60 47 47 df 3f 7b 32 f0 fe f0 d8 f8 ee b3 47 03 9f 66 db 58 94 c1 d1 11 ca 00 2b 92 3c 30 36 4c 1a d4 b1 50 de b1 c0 ab 29 ea 44 e1 9a d6 e2 f2 48 df 26 95 68 Data Ascii: l-5^6QLRxH~VtUHSq\Z,~tb$NeS@!>\|85,\04m*T1skU-a$@S}"#$BAPh1$=A)9;$M`GG?{2GfX+<06LP)DH&h
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 29 03 b3 9f 23 06 39 79 69 9c 16 a1 e5 c1 56 a1 73 06 e4 f2 b8 2a 00 72 22 a5 e8 f1 e9 71 05 2a a4 e7 c6 b5 d4 37 f6 6a a1 dc a0 fa 33 94 72 2e 27 d1 5a e0 69 55 7a ec c7 ba 3b 3b 20 75 22 b4 86 cb ac a5 af 77 b5 13 f6 7b 07 ce 7a 69 18 12 e2 92 f7 29 95 12 e7 5e b4 d1 c3 4f ec d1 41 38 65 9e 77 52 de 27 33 90 b1 43 2b 0e f9 76 3b 5f eb fb 17 db aa a1 f3 26 36 f7 0a 14 ac ed 6a ec 35 40 62 8e b3 76 3b 2f b6 43 5b b6 56 67 61 97 5b 60 fa f5 95 14 37 1e 83 db 74 bf f9 8d 7a fc 4a 82 6e e7 fa 5b 93 12 bc 44 a6 34 86 7c 02 88 05 54 fb 39 8d 39 89 f9 5b fc 45 b8 97 ed da 6c 53 80 76 d2 62 60 5d 6d b6 6a 50 70 14 13 66 a5 39 59 7f 02 58 b3 56 a5 a2 da 08 c1 58 58 09 63 fd 07 a3 93 02 a7 ac 58 51 3d af 59 9e 92 42 ea 8b c9 f2 24 2d ca c3 4f 2b 14 1d 3b d9 c8 88 Data Ascii: )#9yiVsr"q7j3r.'ZiUz;; u"w{zi)^OA8ewR'3C+v;_&6j5@bv;/C[Vga[`7tzJn[D4\|T99[ElSvb`]mjPpf9YXVXXcXQ=YB$-O+;
2024-10-08 08:04:00 UTC	2312	IN	Data Raw: 87 35 6b 54 af 11 52 64 47 fa 3d ff af 53 ff 9f 93 7e 18 e2 14 6c 49 5c 96 0e 31 3b b0 84 29 1a 56 9e 49 8c bd 49 fb b0 db 4d 12 7f 98 e7 11 91 b0 63 c9 5c 02 51 55 aa 92 c0 34 6e 2c 7e ed 8a 72 66 b3 7d c1 6a 55 8c 7c e1 c1 25 d7 48 9a 93 37 7d 0d 8c 95 ce ce 6e 6e ce cf e9 c3 d5 55 b9 95 f0 15 35 ee e6 41 e0 79 26 5d 6c e7 96 0b e3 94 96 73 a6 4c 07 b5 02 c0 d5 68 a1 0a f7 50 0d 9b 43 ea 25 35 5e a8 fa b4 6f ea 35 8e 07 ea f9 1e 31 5b a7 1a 7d 3d 34 18 33 3e ce 63 ac 96 a2 94 f1 7b 93 1e e7 94 26 f1 a8 bf 7d 44 57 2e bf 1f a8 07 23 82 9c 56 43 95 cd 76 d5 f6 46 75 bd 8f 95 db d6 1c 06 bd 29 5a 46 3d 52 e0 53 66 5b 10 ab 66 66 05 f7 4d f3 a6 4d b0 84 86 8f bc 7c 74 70 33 bd 1a 14 fa a4 8d 8f 16 20 46 4b 94 50 3a 74 81 8f 08 11 70 60 39 1e 86 9b 4d 6c d7 Data Ascii: 5kTRdG=S~lI\1;)VIIMc\QU4n,~rf}jU\|%H7}nnU5Ay&]lsLhPC%5^o51[}=43>c{&}DW.#VCvFu)ZF=RSf[ffMM\|tp3 FKP:tp`9Ml
2024-10-08 08:04:00 UTC	584	IN	Data Raw: 9f 1a 74 a6 46 6a 40 21 ef 0e 93 c7 b2 05 c8 c8 78 86 e3 7a 32 7d f9 9c 91 4f c3 8b 2b f8 7f 44 60 86 b6 ed ea e2 b4 f0 d2 27 af 58 4a 73 a2 5f 94 ae c6 0c c0 76 d7 1f cb e7 ec 2f 8b 15 e2 7c c7 7c 85 d3 17 f3 d5 fe b9 b1 5c a5 16 3f 99 fd aa ea e0 cc 16 06 a5 be 66 17 57 6d 0d 1a d6 e0 63 0b 00 d7 70 c1 35 dc cb 16 00 cf 17 66 8f 03 e0 05 80 e0 c0 0d 02 3b 04 02 80 4b 0e dc 70 20 10 d8 e1 d3 7d fd d0 91 44 d9 fb 95 2f 5a 14 c5 e5 fb 45 42 91 fe 06 79 7a 1e b2 e4 0d 48 93 d1 cc 4b 76 92 a4 be 41 9c e8 94 1b 4b 42 4e 4c 67 c7 73 33 2b 6e 66 46 3b 65 84 d3 21 0a d7 48 0f 4b 91 16 c6 41 18 99 b4 20 32 e6 e3 47 22 c1 0b 49 cd d4 90 4e 09 6a 9d 1c 94 9b 49 41 5f 62 d0 e7 49 b0 0f 28 bd 73 79 73 eb fa 36 ee 1b d6 8e f6 ad 9c 03 96 4e aa 17 b6 32 e7 96 9e 59 52 Data Ascii: tFj@!xz2}O+D`'XJs_v/\|\|\?fWmcp5f;Kp }D/ZEByzHKvAKBNLgs3+nfF;e!HKA 2G"INjIA_bI(sys6N2YR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:00 UTC	696	OUT	GET /Content/Fonts/open-sans-latin-600-normal.woff2 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://evicertia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:00 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 31 20 4f 63 74 20 32 30 32 34 20 31 34 3a 34 32 3a 33 33 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 38 36 32 38 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 66 65 72 72 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:00 GMTlast-modified: Tue, 01 Oct 2024 14:42:33 GMTx-aspnet-version: 4.0.30319content-length: 18628cache-control: privatecontent-type: application/octet-streamx-content-type-options: nosniffreferr
2024-10-08 08:04:00 UTC	1169	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 c4 00 12 00 00 00 00 8a e4 00 00 48 59 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 08 1b 8f 4e 1c 86 68 06 60 3f 53 54 41 54 5a 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b4 74 81 9b 22 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 85 26 07 89 1f 0c 85 1f 1b a7 7a 37 06 37 0b 2a 71 3b c0 db ad 5d de 34 a2 82 d6 1f 45 b0 71 80 60 7c 17 cd fe ff ff ef 49 c7 18 b2 51 03 a4 54 fb 4d 44 20 16 61 99 10 a8 b2 d1 05 d9 63 14 3e 4a 31 81 88 40 ae f7 4d 9b 82 e4 f3 36 63 15 dd bd f3 40 0f 26 c9 92 c4 67 95 98 c5 e4 fa fc c9 25 6b 13 84 a8 2e 1c a4 8f c9 16 c8 42 d8 e1 0f 09 5e 3b 33 4a 38 3c 93 8e 9f 09 2b 88 20 42 32 a1 4e 2c 8c 59 ac 72 bb 1b 1e 58 9e ba eb 9e 64 82 1c bd c2 79 50 28 8c 6b fa 9b d9 f6 58 Data Ascii: wOF2HHYNh`?STATZ0\|t"26$` &z77*q;]4Eq`\|IQTMD ac>J1@M6c@&g%k.B^;3J8<+ B2N,YrXdyP(kX
2024-10-08 08:04:00 UTC	2896	IN	Data Raw: 2f 2b 95 1b c7 a0 10 43 02 ab 5d 69 2d 4c 61 99 80 9d 3e ad 0a f9 53 50 fc 5e 1f 6b a7 5e d6 bf f5 a0 fe a6 ef fe 51 1b cd a8 d6 ea 7c 9d ac 23 35 57 13 35 54 07 aa a7 da aa a1 64 25 91 42 cc 8b 2a a7 32 e4 df f3 2b b1 62 8a 5e 11 85 2f 74 21 cb bb 5c cb be e0 65 56 7b 0b 5c 1a ca 4c 88 8a 01 b2 f9 f5 a1 f7 f9 aa 63 f3 79 fe d3 6d 17 72 ef a1 5b f9 5b ae b7 8b f9 4b 93 2f e4 ac 1c cf 5f ca 99 1c 6b 79 32 f0 51 7f 0b c9 ae 36 95 2d 59 97 95 cd 7d 21 a5 52 20 a2 e3 69 99 d4 a0 19 8f b2 2a a4 60 8b 99 54 21 3d 84 4d 54 22 6a 22 3d eb c0 42 9c c5 36 df 22 4d 52 bf f8 a2 7d 55 5d d1 3b 95 40 3f e2 33 6b 3d 54 aa 3b e3 6d 6c c7 d3 78 14 77 92 6a af d4 1f 40 61 d6 68 e3 6e dd 01 38 63 36 14 99 2e df 49 ab be b5 2a d9 f4 6a 03 e2 64 07 8c 8d 3e 36 b2 cd 05 ac e6 Data Ascii: /+C]i-La>SP^k^Q\|#5W5Td%B2+b^/t!\eV{\Lcymr[[K/_ky2Q6-Y}!R i`T!=MT"j"=B6"MR}U];@?3k=T;mlxwj@ahn8c6.I*jd>6
2024-10-08 08:04:00 UTC	2896	IN	Data Raw: e9 d8 99 6f a7 52 8e 1f 36 a4 56 55 84 36 49 5d fa 7e 80 99 33 00 a7 12 cb 33 84 20 3f e2 78 ed 5a 2e 82 d4 59 ab 74 d2 9d 12 71 88 2c 09 7b 87 6f ec 0f cb 14 06 0b 8f d2 e7 2e 10 97 dc 5c f8 a3 6e 40 f1 b7 ff f9 9b 13 90 cc 14 55 9d 00 44 c9 a6 ab c8 7c 9e 5b 78 e4 48 3b dd 92 2b fa b5 89 37 a1 b1 ff 16 b8 14 fc 87 64 05 13 dd da 27 d7 b0 0d 46 42 fd ee ba eb 92 5c f7 5b c9 f2 f7 bf 0b 5e 56 27 7a af 80 f4 da f8 e7 e2 67 a0 0b 52 d2 09 1d 5c 20 f5 f9 82 5b 7c b0 25 8c 73 d5 fb bd 61 66 7c 65 a3 dc 73 46 fa 9e ba 67 96 32 d6 1a 23 cb 13 24 fb c2 f8 db 01 78 ae 6c 5e c4 f8 2a 0c 7c 6e eb 29 67 2c 9a b2 73 65 93 87 9d 07 9e c7 27 d6 5a e5 82 7f 9b 4b 0a 89 c5 a0 2b 7d 74 4a 8d 03 94 8f 3b a0 ba 37 82 b4 ab 31 67 cf f3 3d 6f 2f ae 4e f2 df 1d 55 2e b5 1d 0f Data Ascii: oR6VU6I]~33 ?xZ.Ytq,{o.\n@UD\|[xH;+7d'FB\[^V'zgR\ [\|%saf\|esFg2#$xl^*\|n)g,se'ZK+}tJ;71g=o/NU.
2024-10-08 08:04:00 UTC	184	IN	Data Raw: f6 1a f8 46 77 c2 6e 36 29 d0 5e 40 75 c2 e8 55 40 fc ba c9 96 62 5b c7 80 08 27 5b c3 d0 ab 83 a3 af ee dc 3e f4 6e e2 e0 f0 bb db 77 fa 5f 8d 0d 07 23 db bb 3a 91 5d c1 68 54 67 57 67 50 87 1f b4 d5 fd a8 fc 02 f5 8c 7a 0c 8e e9 c8 df ca e4 fa 7f 37 61 82 3a ba bf 46 2c 6c a2 36 b2 a7 08 09 4d c9 b5 e3 27 a4 78 26 d9 15 1d 34 a0 cf 7c 67 56 92 b9 43 e3 d9 c2 9c 3a db 7e 6f 22 8c da 26 f5 dd e7 14 c8 25 02 6c 4f 55 4e ac c7 5e 42 ba 75 0e 9a cf eb 58 8e 00 f1 dc ba 68 44 47 16 32 a5 ad 30 37 b9 17 d9 0c b6 7c 83 e3 13 22 82 d0 59 e7 52 fd f8 42 Data Ascii: Fwn6)^@uU@b['[>nw_#:]hTgWgPz7a:F,l6M'x&4\|gVC:~o"&%lOUN^BuXhDG207\|"YRB
2024-10-08 08:04:00 UTC	2896	IN	Data Raw: 22 96 1d e6 c0 c5 fb 4f 3d d2 75 02 15 54 0d 4b 2e be d6 72 b6 ed d7 f7 87 83 7c a4 50 b6 e4 6a 72 61 b5 31 ca 5f dd db 6d 2c c8 5f 66 9c 52 b8 9e 4b 29 4c 96 87 87 ae 5f 6c 52 78 bc 64 23 a5 58 06 0b 0a 54 b7 7b 0a b1 29 93 66 98 de e0 9b 3f f7 be 90 3a 11 d1 13 7e 25 e5 a9 77 12 14 f6 67 51 86 4d 99 b1 bd ae 43 db 52 5b d7 52 57 eb 52 6b ef 92 56 d7 7f b7 74 70 3e a3 c1 63 30 c2 0c 84 62 bd 00 9d 51 c3 6a e0 2e 5c 52 ba a4 5a 5d 42 a5 a3 03 02 18 68 2a 85 81 0d 08 a0 63 d5 5d 3f c8 2d f4 e4 f7 e8 fe dd 8d 19 ba b7 e8 ad 9f 7f e1 4c 72 ed e4 dd 25 01 65 7b 3b 91 72 7b f9 c8 d4 bd a5 34 ca bb ed 13 ae 9f b2 8b 13 12 b2 c5 ee 9f 4e 1e 77 8b fd a5 89 89 a2 d2 fc bf b0 6b ef d9 9e 75 01 b1 15 58 b6 d8 55 93 f1 ea fc ae 45 da 2f 7a 88 07 8b c5 d2 4c 61 f3 50 Data Ascii: "O=uTK.r\|Pjra1_m,_fRK)L_lRxd#XT{)f?:~%wgQMCR[RWRkVtp>c0bQj.\RZ]Bh*c]?-Lr%e{;r{4NwkuXUE/zLaP
2024-10-08 08:04:00 UTC	2896	IN	Data Raw: 2a 74 1b a7 1b e7 e8 73 62 54 89 7a 1c e3 5c a3 cc b1 8e 1f 0a ba 49 b4 57 ad 56 7f 19 55 e8 e6 87 aa 22 34 a9 3a 31 3a 94 a2 49 3c 68 08 3f 6a 98 03 c9 b1 52 75 83 e4 19 cb 9e 77 58 bd d4 95 d1 8c 0f 78 65 9b 68 7c 97 fd 2f db 9d 6b 52 e3 a5 a9 75 68 cf a1 dd 26 00 84 06 fc 15 be dc 4b 05 93 a3 55 3a e1 e5 fa a8 db 85 ff 9b 1e d9 b2 4d 2f e8 1d 8c 48 75 27 a8 77 9f 0e f9 64 11 14 eb 16 14 43 b0 4e 31 6a 26 b4 5b bc d3 d4 3c 6a 30 60 f9 bf a7 e1 15 4c 37 f0 c5 20 9a 8c ef 13 e2 17 29 b4 a2 9e a1 0a e1 7e 54 8c 5f 4a 54 d5 f1 c0 ce 23 6f 62 cd 5d f0 41 8e 3c 51 be 10 ac 21 d2 16 16 f0 5c 82 5c f0 b1 66 3b a6 a6 63 e0 65 60 79 bb ac 4a c4 c8 1f c7 98 b9 e2 83 9c 78 d9 05 59 da 1a 42 b0 28 9f e7 1c e4 82 8f 31 df 39 d2 7d 2c 88 56 95 e2 13 e2 47 15 c2 fb 5d Data Ascii: *tsbTz\IWVU"4:1:I<h?jRuwXxeh\|/kRuh&KU:M/Hu'wdCN1j&[<j0`L7 )~T_JT#ob]A<Q!\\f;ce`yJxYB(19},VG]
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 12 36 54 1f 24 f5 59 b5 77 c3 20 ad bd be 79 d8 af 1a 04 3d 85 20 56 a6 10 2b 93 88 e1 c9 c0 85 6f 2e ee 07 d1 1e 73 e1 34 6b 0e a6 fe f4 be 61 bf 22 23 a1 c3 9d c8 45 0c 4c e2 e4 13 74 db 05 e1 89 c5 78 86 21 d1 22 8a bf 11 18 4f 09 44 fa 52 03 f1 24 2a d2 17 49 41 1a 18 24 df 0c 8f 8e 23 e9 a8 c6 34 ea 1c 0e db 1d ea e6 60 37 e4 62 71 b9 a6 a6 96 a4 e6 58 59 93 ac 67 60 89 1e 1e 7d 75 f7 ce 81 ff 66 46 26 b6 ee dd 3e b4 33 33 84 0b 6e eb ee 0a 6e c3 61 51 6d dd 9d a8 76 2d f3 82 3f cc 70 bb f2 f7 31 ef 42 b3 ca 88 5e 52 a5 48 d5 89 54 7f 4a 51 5b ab 2c 96 54 df 42 e2 72 7b 99 d1 0b 32 9e dd b1 a4 b6 45 da 9e 4b ee 38 ab 34 a8 23 8c 16 ea e9 89 a6 d2 28 21 b8 70 43 7d c6 0d 5e 2f 23 7a be 86 67 7b 3c a9 7d 81 5e 67 8e df 95 df cb 9c b6 12 15 93 bc 2a 94 Data Ascii: 6T$Yw y= V+o.s4ka"#ELtx!"ODR$IA$#4`7bqXYg`}ufF&>33nnaQmv-?p1B^RHTJQ[,TBr{2EK84#(!pC}^/#zg{<}^g
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 23 15 ad d3 41 41 4f cd 5a af 56 ab 7a a1 ad 9f 2d c1 b1 f7 26 3e f7 1a 10 4e 07 3b a2 4b 37 8c 29 ce fc c5 5d b1 1a 5a ba cc bd c0 2a 37 81 c7 cd 6a 89 db f3 81 dd 7e f8 a5 0f 6e fb 99 00 fd da f1 37 9c 12 3c 47 86 b6 51 3f 00 c2 02 aa b3 29 89 29 8c e9 35 f6 82 57 fc b0 2e 2b 56 25 2d 8c 32 9c e6 4b 65 99 83 b3 31 51 41 93 93 f8 0b 00 92 1d d8 68 dc 26 86 c0 02 27 c2 68 fb 01 7c 41 70 da 03 33 8a e7 2d cd 13 14 d2 58 54 37 86 8c a2 87 ef e6 18 b7 df 14 d6 09 97 3f 61 37 15 8b 29 46 c9 56 c1 b4 30 05 98 9d 99 e7 f5 ac 2b b3 5e 73 23 30 59 74 78 71 63 bb df 3d cf cd c3 93 a4 43 6e 0f f3 48 77 90 d2 aa e9 65 1a 02 23 9a de 59 35 ad e0 88 d4 21 cb 9e ea 32 4d a3 08 01 50 b7 2b 51 1b df 36 c2 fd 7e eb bb a6 a9 f7 cb d7 5b 4b 9f 51 be 55 20 6b 7d 44 60 63 88 Data Ascii: #AAOZVz-&>N;K7)]Z*7j~n7<GQ?))5W.+V%-2Ke1QAh&'h\|Ap3-XT7?a7)FV0+^s#0Ytxqc=CnHwe#Y5!2MP+Q6~[KQU k}D`c
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: bd a0 ca ed 5d 10 78 9e 61 77 cb 69 f9 8e 9d d6 33 ce 94 18 a0 5a 00 18 8d 1a 45 f3 00 87 11 7b 48 bc 2c 38 08 55 1e 4f 75 57 b5 87 ee cd dd 1a 51 3f 05 6b 06 2d b4 14 0b bd 25 4b 69 5b 45 e4 b0 97 f1 28 25 24 8b 47 fd ed ec 4d e3 d2 a7 ee cd 6e 82 a0 a4 21 62 c9 62 fb a6 2c 70 e8 a7 68 b9 eb 8c 71 d4 da 6a 74 12 12 05 66 32 1b c7 d8 34 75 5b e9 54 77 57 f7 ac 7d 08 1d 3f eb d3 07 9b 96 52 b9 80 e4 93 61 1f 05 40 8f 62 6d 46 e9 90 1b 3c 47 a1 80 d5 87 81 30 5c 2e 63 3f 8f 5e dd 37 46 f2 7e bf d7 03 87 3e da 69 ed f6 27 23 6b ef 65 68 5f 5d d7 ee ba 37 f7 1b 04 25 0d ad cb 65 d6 c8 3c c9 9b fb 0a 26 62 05 fc 85 bb ab 78 f9 82 d3 8f a3 2e 7b 43 cb 69 67 e3 09 5c d1 a9 ee 93 da 2f bb 37 df 7e 88 a8 7f c4 f6 64 ee 01 f1 32 0b f3 b3 33 36 86 b6 4d 5e 1d 8e 4f Data Ascii: ]xawi3ZE{H,8UOuWQ?k-%Ki[E(%$GMn!bb,phqjtf24u[TwW}?Ra@bmF<G0\.c?^7F~>i'#keh_]7%e<&bx.{Cig\/7~d236M^O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:00 UTC	451	OUT	GET /bundles/scripts?v=x4d2qT5CnQZ_0DFzoxe_OYPzAkbBM9iDu4jhJfBbepk1 HTTP/1.1 Host: evicertia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:00 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 34 33 32 36 31 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 38 20 4f 63 74 20 32 30 32 35 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 78 2d 63 6f 6e 74 65 6e Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:00 GMTx-aspnet-version: 4.0.30319content-length: 143261expires: Wed, 08 Oct 2025 08:04:00 GMTcache-control: publiclast-modified: Tue, 08 Oct 2024 08:04:00 GMTcontent-type: text/javascriptx-conten
2024-10-08 08:04:00 UTC	1138	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 70 6f 70 70 65 72 6a 73 2f 63 6f 72 65 20 76 32 2e 31 31 2e 38 20 2d 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 50 6f 70 70 65 72 3d 7b 7d 29 7d Data Ascii: /** * @popperjs/core v2.11.8 - MIT License */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}
2024-10-08 08:04:00 UTC	2896	IN	Data Raw: 61 2e 68 65 69 67 68 74 29 2f 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 31 29 3b 76 61 72 20 75 3d 28 6e 28 65 29 3f 74 28 65 29 3a 77 69 6e 64 6f 77 29 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2c 6c 3d 21 63 28 29 26 26 69 2c 64 3d 28 61 2e 6c 65 66 74 2b 28 6c 26 26 75 3f 75 2e 6f 66 66 73 65 74 4c 65 66 74 3a 30 29 29 2f 66 2c 68 3d 28 61 2e 74 6f 70 2b 28 6c 26 26 75 3f 75 2e 6f 66 66 73 65 74 54 6f 70 3a 30 29 29 2f 70 2c 6d 3d 61 2e 77 69 64 74 68 2f 66 2c 76 3d 61 2e 68 65 69 67 68 74 2f 70 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 6d 2c 68 65 69 67 68 74 3a 76 2c 74 6f 70 3a 68 2c 72 69 67 68 74 3a 64 2b 6d 2c 62 6f 74 74 6f 6d 3a 68 2b 76 2c 6c 65 66 74 3a 64 2c 78 3a 64 2c 79 3a 68 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 Data Ascii: a.height)/e.offsetHeight\|\|1);var u=(n(e)?t(e):window).visualViewport,l=!c()&&i,d=(a.left+(l&&u?u.offsetLeft:0))/f,h=(a.top+(l&&u?u.offsetTop:0))/p,m=a.width/f,v=a.height/p;return{width:m,height:v,top:h,right:d+m,bottom:h+v,left:d,x:d,y:h}}function u(e){va
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 61 64 64 28 65 2e 6e 61 6d 65 29 2c 5b 5d 2e 63 6f 6e 63 61 74 28 65 2e 72 65 71 75 69 72 65 73 7c 7c 5b 5d 2c 65 2e 72 65 71 75 69 72 65 73 49 66 45 78 69 73 74 73 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6e 2e 68 61 73 28 65 29 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 3b 72 26 26 6f 28 72 29 7d 7d 29 29 2c 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 65 74 28 65 2e 6e 61 6d 65 2c 65 29 7d 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 68 61 73 28 65 2e 6e 61 6d 65 29 7c 7c 6f 28 65 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 67 Data Ascii: add(e.name),[].concat(e.requires\|\|[],e.requiresIfExists\|\|[]).forEach((function(e){if(!n.has(e)){var r=t.get(e);r&&o(r)}})),r.push(e)}return e.forEach((function(e){t.set(e.name,e)})),e.forEach((function(e){n.has(e.name)\|\|o(e)})),r}function C(e,t){var n=t.g
2024-10-08 08:04:00 UTC	1632	IN	Data Raw: 65 22 2c 22 66 69 78 65 64 22 5d 2e 69 6e 64 65 78 4f 66 28 6d 28 65 29 2e 70 6f 73 69 74 69 6f 6e 29 3e 3d 30 26 26 72 28 65 29 3f 45 28 65 29 3a 65 3b 72 65 74 75 72 6e 20 6e 28 6f 29 3f 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 26 26 43 28 65 2c 6f 29 26 26 22 62 6f 64 79 22 21 3d 3d 6c 28 65 29 7d 29 29 3a 5b 5d 7d 28 65 29 3a 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 2c 63 3d 5b 5d 2e 63 6f 6e 63 61 74 28 66 2c 5b 6f 5d 29 2c 70 3d 63 5b 30 5d 2c 75 3d 63 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 49 28 65 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 70 3d 69 28 72 2e 74 6f 70 2c 74 2e 74 6f 70 29 2c 74 2e 72 69 67 68 74 3d 61 28 72 2e 72 69 67 68 74 Data Ascii: e","fixed"].indexOf(m(e).position)>=0&&r(e)?E(e):e;return n(o)?t.filter((function(e){return n(e)&&C(e,o)&&"body"!==l(e)})):[]}(e):[].concat(t),c=[].concat(f,[o]),p=c[0],u=c.reduce((function(t,n){var r=I(e,n,s);return t.top=i(r.top,t.top),t.right=a(r.right
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 3d 58 28 7b 72 65 66 65 72 65 6e 63 65 3a 50 2c 65 6c 65 6d 65 6e 74 3a 4f 2c 73 74 72 61 74 65 67 79 3a 22 61 62 73 6f 6c 75 74 65 22 2c 70 6c 61 63 65 6d 65 6e 74 3a 69 7d 29 2c 57 3d 4e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 4f 2c 4d 29 29 2c 42 3d 6d 3d 3d 3d 54 3f 57 3a 50 2c 52 3d 7b 74 6f 70 3a 45 2e 74 6f 70 2d 42 2e 74 6f 70 2b 78 2e 74 6f 70 2c 62 6f 74 74 6f 6d 3a 42 2e 62 6f 74 74 6f 6d 2d 45 2e 62 6f 74 74 6f 6d 2b 78 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 45 2e 6c 65 66 74 2d 42 2e 6c 65 66 74 2b 78 2e 6c 65 66 74 2c 72 69 67 68 74 3a 42 2e 72 69 67 68 74 2d 45 2e 72 69 67 68 74 2b 78 2e 72 69 67 68 74 7d 2c 53 3d 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 6f 66 66 73 65 74 3b 69 66 28 6d 3d 3d 3d 54 26 26 53 29 7b 76 61 Data Ascii: =X({reference:P,element:O,strategy:"absolute",placement:i}),W=N(Object.assign({},O,M)),B=m===T?W:P,R={top:E.top-B.top+x.top,bottom:B.bottom-E.bottom+x.bottom,left:E.left-B.left+x.left,right:B.right-E.right+x.right},S=e.modifiersData.offset;if(m===T&&S){va
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 74 61 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2e 64 61 74 61 2c 74 2e 64 61 74 61 29 7d 29 3a 74 2c 65 7d 29 2c 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 70 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 5b 65 5d 7d 29 29 29 29 3b 72 65 74 75 72 6e 20 66 2e 6f 72 64 65 72 65 64 4d 6f 64 69 66 69 65 72 73 3d 64 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 6e 61 62 6c 65 64 7d 29 29 2c 66 2e 6f 72 64 65 72 65 64 4d 6f 64 69 66 69 65 72 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 61 6d 65 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 2c 6f 3d 65 2e 65 66 66 65 Data Ascii: ta:Object.assign({},n.data,t.data)}):t,e}),{}),Object.keys(p).map((function(e){return p[e]}))));return f.orderedModifiers=d.filter((function(e){return e.enabled})),f.orderedModifiers.forEach((function(e){var t=e.name,n=e.options,r=void 0===n?{}:n,o=e.effe
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 3d 3d 69 7c 7c 69 2c 73 3d 6f 2e 72 65 73 69 7a 65 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 73 2c 63 3d 74 28 6e 2e 65 6c 65 6d 65 6e 74 73 2e 70 6f 70 70 65 72 29 2c 70 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6e 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 6e 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 70 6f 70 70 65 72 29 3b 72 65 74 75 72 6e 20 61 26 26 70 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 72 2e 75 70 64 61 74 65 2c 24 29 7d 29 29 2c 66 26 26 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 72 2e 75 70 64 61 74 65 2c 24 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 26 26 70 2e 66 Data Ascii: ==i\|\|i,s=o.resize,f=void 0===s\|\|s,c=t(n.elements.popper),p=[].concat(n.scrollParents.reference,n.scrollParents.popper);return a&&p.forEach((function(e){e.addEventListener("scroll",r.update,$)})),f&&c.addEventListener("resize",r.update,$),function(){a&&p.f
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 3b 72 65 74 75 72 6e 7b 78 3a 73 28 6e 2a 6f 29 2f 6f 7c 7c 30 2c 79 3a 73 28 72 2a 6f 29 2f 6f 7c 7c 30 7d 7d 28 7b 78 3a 79 2c 79 3a 62 7d 2c 74 28 72 29 29 3a 7b 78 3a 79 2c 79 3a 62 7d 3b 72 65 74 75 72 6e 20 79 3d 56 2e 78 2c 62 3d 56 2e 79 2c 70 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 53 2c 28 28 52 3d 7b 7d 29 5b 4d 5d 3d 4f 3f 22 30 22 3a 22 22 2c 52 5b 6a 5d 3d 77 3f 22 30 22 3a 22 22 2c 52 2e 74 72 61 6e 73 66 6f 72 6d 3d 28 6b 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 29 3c 3d 31 3f 22 74 72 61 6e 73 6c 61 74 65 28 22 2b 79 2b 22 70 78 2c 20 22 2b 62 2b 22 70 78 29 22 3a 22 74 72 61 6e 73 6c 61 74 65 33 64 28 22 2b 79 2b 22 70 78 2c 20 22 2b 62 2b 22 70 78 2c Data Ascii: evicePixelRatio\|\|1;return{x:s(no)/o\|\|0,y:s(ro)/o\|\|0}}({x:y,y:b},t(r)):{x:y,y:b};return y=V.x,b=V.y,p?Object.assign({},S,((R={})[M]=O?"0":"",R[j]=w?"0":"",R.transform=(k.devicePixelRatio\|\|1)<=1?"translate("+y+"px, "+b+"px)":"translate3d("+y+"px, "+b+"px,
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6f 5b 65 5d 3b 21 31 3d 3d 3d 74 3f 69 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 3a 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 21 30 3d 3d 3d 74 3f 22 22 3a 74 29 7d 29 29 29 7d 29 29 7d 2c 65 66 66 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 2c 6e 3d 7b 70 6f 70 70 65 72 3a 7b 70 6f 73 69 74 69 6f 6e 3a 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 2c 6c 65 66 74 3a 22 30 22 2c 74 6f 70 3a 22 30 22 2c 6d 61 72 67 69 6e 3a 22 30 22 7d 2c 61 72 72 6f 77 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 2c 72 65 66 65 72 65 6e 63 65 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 65 6c 65 6d Data Ascii: tion(e){var t=o[e];!1===t?i.removeAttribute(e):i.setAttribute(e,!0===t?"":t)})))}))},effect:function(e){var t=e.state,n={popper:{position:t.options.strategy,left:"0",top:"0",margin:"0"},arrow:{position:"absolute"},reference:{}};return Object.assign(t.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:00 UTC	400	OUT	GET /Master/Logo HTTP/1.1 Host: evicertia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:00 UTC	609	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 6d 76 63 2d 76 65 72 73 69 6f 6e 3a 20 35 2e 32 0d 0a 65 74 61 67 3a 20 61 33 38 37 36 30 32 39 33 66 62 62 62 34 35 37 39 32 35 33 33 62 64 63 39 66 31 34 39 36 31 63 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 64 65 6e 79 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 36 34 37 36 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 33 30 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 72 6f 78 79 2d 72 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:00 GMTx-aspnetmvc-version: 5.2etag: a38760293fbbb45792533bdc9f14961cx-frame-options: denyx-aspnet-version: 4.0.30319content-length: 6476cache-control: private, max-age=300, must-revalidate, proxy-r
2024-10-08 08:04:00 UTC	1094	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 64 08 06 00 00 00 3c 01 0d c0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 e1 49 44 41 54 78 01 ed 9d 4d 76 dc 46 92 80 23 51 72 8b 3d 1b 97 ec ee f7 24 7b a1 d4 09 44 9d 40 c5 13 88 5a 5a 5e 88 b4 c7 b3 15 79 02 91 27 20 b5 1d 3f 0f c9 85 ed 79 b3 11 75 02 c3 27 10 75 02 c3 8b 69 f9 bd b6 ac f2 a6 45 4a 2a 64 47 44 26 aa 50 55 48 fc 11 a8 3f c5 f7 5e b1 8a 40 16 90 05 24 22 23 23 23 23 00 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 16 00 05 42 6d ba 9f eb 75 35 80 03 fc d8 cb da 6f 3a Data Ascii: PNGIHDR,d<pHYssRGBgAMAaIDATxMvF#Qr=${D@ZZ^y' ?yu'uiEJ*dGD&PUH?^@$"####AAAAAAAAAAAAAAABmu5o:
2024-10-08 08:04:00 UTC	5382	IN	Data Raw: 47 58 af b3 55 9b 1d 76 1d f5 1e cc 07 4d ed 0c db db 86 4f 68 e5 ce 12 92 36 f5 c9 0d 7d 40 3e 48 c6 fe 08 0d 0d 57 90 1a 25 ca ae 9f c8 0e 40 82 02 16 00 e7 c6 a0 7d fb 55 4a 75 cd ab 73 27 2e 7e c0 29 14 08 69 12 30 07 e8 da d3 fd cd 2b 33 0c 54 38 bf 19 2f b2 c7 3c 65 83 ef 22 81 d7 a3 c8 dd 65 19 89 e7 fd 9b f0 ba ba c0 98 99 78 35 2c 6e a8 e7 f0 d3 0c 57 7e f7 b0 61 3e c7 07 78 7b 9e eb f1 ca b8 31 4c aa e0 97 39 57 1c c3 01 cc 11 63 60 07 ed 52 cf 7c 1a ae 33 de 6a 98 27 68 3c 0e ce 71 c8 dd 64 cf 6f 8d ea dd d4 e7 64 d8 a9 cb 1e 82 ec 8c 28 48 77 71 d4 11 42 9d a1 f2 f8 79 6b 81 02 26 84 86 a0 48 24 50 f4 fb 6d 9d cf 94 1d 6a 57 82 65 89 35 23 ad 17 14 d5 a4 e9 bd ca 88 7a 72 c5 5f 2f 18 9f f9 98 05 d8 80 c8 6e 84 2a 61 34 af 20 63 2e 92 a8 97 86 Data Ascii: GXUvMOh6}@>HW%@}UJus'.~)i0+3T8/<e"ex5,nW~a>x{1L9Wc`R\|3j'h<qdod(HwqByk&H$PmjWe5#zr_/n*a4 c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:00 UTC	696	OUT	GET /Content/Fonts/open-sans-latin-400-normal.woff2 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://evicertia.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://evicertia.com/bundles/styles?v=8pyM4Ao5Ucs1d3TNJosyDyGffN92hXpZLoIrF2dKACo1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:00 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 30 20 47 4d 54 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 31 20 4f 63 74 20 32 30 32 34 20 31 34 3a 34 32 3a 33 33 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 38 36 36 34 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 66 65 72 72 Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:00 GMTlast-modified: Tue, 01 Oct 2024 14:42:33 GMTx-aspnet-version: 4.0.30319content-length: 18664cache-control: privatecontent-type: application/octet-streamx-content-type-options: nosniffreferr
2024-10-08 08:04:00 UTC	1169	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 e8 00 12 00 00 00 00 8b 18 00 00 48 7f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 08 1b 90 0a 1c 86 68 06 60 3f 53 54 41 54 5e 00 82 30 08 81 7c 09 9f 14 11 10 0a 81 b5 18 81 9b 2b 0b 84 32 00 01 36 02 24 03 88 60 04 20 05 84 78 07 89 1f 0c 85 1f 1b c2 7a 35 63 dc 0d 1e 36 0e 30 60 fb 4c 5f 23 11 c2 c6 41 18 3f 78 b3 91 81 60 e3 00 cc be 40 93 ff ff 7b 72 32 86 b0 3a b0 54 eb fd 10 59 30 64 09 82 21 0e 2c b7 90 48 69 74 1a ba d2 0a 1a 09 39 ae ec 43 a9 87 d0 10 59 3c 69 9d b8 0b 9f b0 48 ac 5a c5 c4 4d 29 d6 c1 e6 e7 26 b1 04 b3 a4 cf 19 b4 49 ab 68 d2 79 5f d6 26 f3 f7 ac b1 07 44 66 a9 16 e9 f0 a5 6a b5 d1 d2 fd 96 0b 73 d2 c3 2a 44 b6 04 91 68 dc 9c dd f5 7b da 6f 3e 78 69 ec ff 88 60 Data Ascii: wOF2HHh`?STAT^0\|+26$` xz5c60`L_#A?x`@{r2:TY0d!,Hit9CY<iHZM)&Ihy_&Dfjs*Dh{o>xi`
2024-10-08 08:04:00 UTC	4344	IN	Data Raw: 2a d4 be 3e b0 66 d6 d0 12 cc be 59 30 4e 34 8c 96 2f be 6e ec e9 d1 1e ea 70 7b db 5e 75 eb ab 6b 55 55 cd 6f 66 95 1d 5e 79 65 8d ad 60 44 8f d0 e1 3f 7c 86 fb 70 1a 36 c3 92 42 10 03 bd ab b7 74 63 4c fe c8 7b ee f6 97 da 77 54 5e e4 6e 6e e4 52 ce 64 27 6b 59 c8 74 26 33 96 c1 74 a7 35 4d a9 8d 36 15 29 4e 6e d2 33 3a c9 49 8c 24 31 3d ae 47 f6 e0 0e ed 5e dd ad 7b 75 87 6e 4d 98 12 56 04 86 f7 b5 8e d6 d4 fe f8 93 96 f9 93 9f fb a1 ef f8 9a 2f f8 94 b7 bc e2 39 1c fb 0e 8f 7b c4 fd ee b4 c6 0d 1e 67 b5 cb 5c e8 6c a7 7a a4 87 3a be db 46 8a a6 70 1a 4b c3 17 0a 6c e0 d1 6b cf e6 32 ca 3a 4a a7 b4 85 a8 38 60 ff 1d 04 d6 d6 bb 3a da 40 7f d1 2f f7 fb 41 4f 75 3f 97 e8 2d 7a e5 40 e7 32 a8 13 f9 46 1b 5a 92 3e b5 1d dd 46 37 d0 55 74 c9 42 f3 a4 8e 44 Data Ascii: *>fY0N4/np{^ukUUof^ye`D?\|p6BtcL{wT^nnRd'kYt&3t5M6)Nn3:I$1=G^{unMV/9{g\lz:FpKlk2:J8`:@/AOu?-z@2FZ>F7UtBD
2024-10-08 08:04:00 UTC	1632	IN	Data Raw: 71 f2 04 d6 19 0b b5 83 3c b7 54 8e 5e 88 cd 0a a7 1b 59 9f ca ea 9e 32 92 7a f0 f3 62 e0 69 23 58 fd f6 6d a6 e4 e4 66 56 33 e4 21 c9 33 6c 33 33 fc 97 b2 c6 ea 59 8b db fa 86 19 6d 84 4f 79 7a c5 bc 85 9e c5 11 e1 eb dc b9 c6 7b 23 0e ed 2d 7b c1 36 38 96 a9 b3 45 4c d6 29 83 f1 b0 ce 06 d0 f5 7a c5 e6 5a 76 94 7e 7d 43 c1 af d6 80 09 03 23 f4 33 72 36 a5 9f e5 d4 dc 57 95 3c 4a e6 4a 86 08 6f 43 97 ed 28 17 16 20 f8 19 68 ec 63 15 35 03 d4 41 94 e0 cd 43 ae a9 a0 0a 8e 75 be e5 68 c1 10 80 9d 67 58 5c 7d da b0 54 19 3f fd 9c 67 29 78 23 21 93 c5 cf a0 e9 ee 5e 4b d0 9e c7 ba 07 a3 4f 35 b5 09 85 22 dc 60 f5 9d 14 80 28 e2 17 2f c6 0e 41 b5 86 7a 77 77 84 e2 f0 b4 3c b1 e2 3c 17 de 64 6a 60 b8 2e 35 9b f4 2e 6d 8e 47 15 5e d5 5e 53 c9 52 66 6b 6c 02 27 Data Ascii: q<T^Y2zbi#XmfV3!3l33YmOyz{#-{68EL)zZv~}C#3r6W<JJoC( hc5ACuhgX\}T?g)x#!^KO5"`(/Azww<<dj`.5.mG^^SRfkl'
2024-10-08 08:04:00 UTC	1448	IN	Data Raw: fd df 8d 2a e9 2c 5d d0 e7 16 7f 78 e6 7c a0 bf ee 49 c7 53 19 5d f9 ea b9 cd 66 a2 ae 43 86 9b 73 ce 9b 03 b5 08 df 90 e8 60 cf 0f 5b 6b 7f 0d b2 37 c2 e5 dd 7b 39 65 eb cd 45 69 a3 7d 55 f9 b0 8f e9 45 51 b5 a9 c2 ec 1e 3d c9 60 68 5f 5a 70 29 2b a1 84 52 35 d1 ad 69 3f 97 85 4e 76 32 0e ca 29 e3 31 c9 b4 46 52 5a 3d b6 ac 89 95 2e 11 04 49 f5 3b c6 92 16 3e 8f 4c d6 7a 8b 6a 8e f4 9f 1d b8 f7 eb 36 64 6c 13 88 d7 38 21 52 6a dd 90 89 96 16 91 b3 48 b8 06 28 56 4c f0 1b 9a bc 91 b1 47 a7 50 89 4d be b9 0d 47 c4 b5 1a 2f 24 c2 d2 7f c7 01 d2 dd 59 e1 ba 52 03 fd 19 7b 8c bd 95 3f 93 3f cb fe 51 a2 84 02 57 34 15 d0 6e a0 ff 65 a7 f1 f6 f1 b9 8e 39 f2 df 0d 0b 1d d6 d2 6f af d9 12 62 67 90 7a 2f 42 bd 43 ba df 9a d7 92 45 8a 15 ed d5 f0 0f c3 e6 ba 02 3c Data Ascii: *,]x\|IS]fCs`[k7{9eEi}UEQ=`h_Zp)+R5i?Nv2)1FRZ=.I;>Lzj6dl8!RjH(VLGPMG/$YR{??QW4ne9obgz/BCE<
2024-10-08 08:04:00 UTC	4344	IN	Data Raw: f8 a4 55 f8 8f 7b db 05 33 47 e1 85 bf f8 51 cd cd a1 8c d4 26 95 81 e6 20 47 2b 77 fa 0f 70 f3 fc f8 8e 39 69 56 6f dc 4d 24 34 ff 2a bd 1c 31 7d c3 8c 6e d2 64 3c 8c 4c 3f ea 9c 73 e9 cd 3c d3 61 ee da 9f a5 33 0b ff 14 eb af 67 38 ce bf 1f a2 05 9f fe f8 85 ff c9 31 2a e1 c2 a7 a7 0a 0f bc 1c 9a 5f 78 3e 54 70 e0 14 f0 1b c4 df 0b af 06 8a ac 6c c0 a2 1d a0 f1 eb bb 5c b8 be ad e1 35 e1 e8 46 f2 9c f7 53 d2 7f 85 71 a4 fb 54 22 b7 b5 6c f0 64 6f ff 3f ab b6 04 be 17 6e f6 85 b0 24 3f 73 12 f6 1f db 3f c9 8a 5d 21 31 3b 5b 5f b1 e5 db 3d 95 f4 43 6d 7c b2 6b 7f ff 35 91 20 3c 6f aa 3f 2d 4d 83 cf 22 be d8 9c 1b e8 d5 6d d4 79 20 6d b5 ea a6 9d cf f9 13 f4 a1 03 75 1e 9f 4e a5 7a 3e 8b 56 94 8e 26 50 4a 29 24 94 70 2c a3 25 94 e3 d5 43 e1 e7 87 b7 30 ab Data Ascii: U{3GQ& G+wp9iVoM$41}nd<L?s<a3g81_x>Tpl\5FSqT"ldo?n$?s?]!1;[_=Cm\|k5 <o?-M"my muNz>V&PJ)$p,%C0
2024-10-08 08:04:00 UTC	5727	IN	Data Raw: 34 95 75 40 60 7c 19 33 9b 26 65 8b 62 49 07 3e df f6 9a 05 59 46 31 72 ff d4 cb d9 3c 27 df 03 36 4e 99 f7 cb 8f 4a 4b c9 cc 7c 24 28 c3 3b 57 c6 28 9f 6d 6f 13 b4 27 e0 4b 48 f1 01 4c 62 f2 53 94 1f 36 8b 22 9d ae a4 7f f2 4b 6c a4 17 32 00 ce 24 67 66 31 48 49 f0 6c 6a 86 1b 40 8b 25 27 c5 c5 31 52 fe 88 75 4e c3 27 c4 51 92 9c 93 3f 73 48 b8 bc 90 70 79 3e 61 6a 1e b1 f6 77 18 6f 02 1d b5 92 46 87 0a 30 1d 67 46 a7 e2 ab dd 64 41 2f 69 eb 18 ef 86 10 58 f2 8b b0 84 68 3c 26 9a 04 47 97 51 13 dd ec 08 54 04 3c 2e 03 41 20 67 c0 e3 e0 54 b8 b3 cb 93 97 69 5c 06 c1 c6 bc 54 62 b5 44 b6 ca 0c 8f 88 20 fb 26 ba 0b ed 85 31 0a bf 9a e6 6c 47 27 5f ec c4 e1 2f de bd d2 7d 35 35 31 f9 f9 db 97 ba 6f 67 94 1c e6 f4 e2 02 73 9a 93 cd 98 5e 9a a7 4f 5b 7b 7c f6 Data Ascii: 4u@`\|3&ebI>YF1r<'6NJK\|$(;W(mo'KHLbS6"Kl2$gf1HIlj@%'1RuN'Q?sHpy>ajwoF0gFdA/iXh<&GQT<.A gTi\TbD &1lG'_/}551ogs^O[{\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:01 UTC	737	OUT	GET /Content/Images/favicon.ico?v=24259.16716.14.14 HTTP/1.1 Host: evicertia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://evicertia.com/Public/EviNotice/Custody/01926b27-fda1-4931-8cb6-ddb420cd95f9/Access Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:01 UTC	521	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 31 20 47 4d 54 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 31 20 4f 63 74 20 32 30 32 34 20 31 34 3a 34 32 3a 33 33 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 31 35 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 6e 6f Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:01 GMTlast-modified: Tue, 01 Oct 2024 14:42:33 GMTx-aspnet-version: 4.0.30319content-length: 1150cache-control: privatecontent-type: image/x-iconx-content-type-options: nosniffreferrer-policy: no
2024-10-08 08:04:01 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 10 40 20 1b 10 30 20 1b 10 30 20 1b 10 30 20 20 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 10 60 20 18 11 df 20 18 11 ff 20 18 12 9f 20 18 12 80 20 18 11 ff 20 19 11 ef 20 18 10 80 20 20 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 10 10 20 19 11 cf 20 18 11 ff 20 18 12 9f 20 18 14 40 00 00 00 00 00 00 00 00 20 1b 15 30 20 18 12 7f 20 19 11 ef 20 18 11 df 20 18 10 20 00 00 00 00 00 00 00 00 00 Data Ascii: h( @ 0 0 0 ` @ 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	94.103.116.70	443	5796	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:02 UTC	435	OUT	GET /Content/Images/favicon.ico?v=24259.16716.14.14 HTTP/1.1 Host: evicertia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=9D5DB9C61DCD812E7BE3C432
2024-10-08 08:04:02 UTC	521	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 38 20 4f 63 74 20 32 30 32 34 20 30 38 3a 30 34 3a 30 32 20 47 4d 54 0d 0a 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 31 20 4f 63 74 20 32 30 32 34 20 31 34 3a 34 32 3a 33 33 20 47 4d 54 0d 0a 78 2d 61 73 70 6e 65 74 2d 76 65 72 73 69 6f 6e 3a 20 34 2e 30 2e 33 30 33 31 39 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 31 35 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 6e 6f Data Ascii: HTTP/1.0 200 OKdate: Tue, 08 Oct 2024 08:04:02 GMTlast-modified: Tue, 01 Oct 2024 14:42:33 GMTx-aspnet-version: 4.0.30319content-length: 1150cache-control: privatecontent-type: image/x-iconx-content-type-options: nosniffreferrer-policy: no
2024-10-08 08:04:02 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 10 40 20 1b 10 30 20 1b 10 30 20 1b 10 30 20 20 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 18 10 60 20 18 11 df 20 18 11 ff 20 18 12 9f 20 18 12 80 20 18 11 ff 20 19 11 ef 20 18 10 80 20 20 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 10 10 20 19 11 cf 20 18 11 ff 20 18 12 9f 20 18 14 40 00 00 00 00 00 00 00 00 20 1b 15 30 20 18 12 7f 20 19 11 ef 20 18 11 df 20 18 10 20 00 00 00 00 00 00 00 00 00 Data Ascii: h( @ 0 0 0 ` @ 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	52771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:46 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:46 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:46 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080446Z-1657d5bbd48sqtlf1huhzuwq7000000004d0000000007sh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:46 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-08 08:04:47 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	52774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:48 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:48 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080448Z-1657d5bbd48xlwdx82gahegw400000000500000000000m8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:48 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	52776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080448Z-1657d5bbd482lxwq1dp2t1zwkc00000004fg000000004ks4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	52772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:48 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:48 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080448Z-1657d5bbd48t66tjar5xuq22r800000004hg00000000d3ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:48 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	52773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:48 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:48 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080448Z-1657d5bbd48lknvp09v995n790000000048g000000009wgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:48 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	52775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:48 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080448Z-1657d5bbd48jwrqbupe3ktsx9w00000004wg000000006t2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:48 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	52778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:48 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48tnj6wmberkg2xy800000004r0000000009m3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	52777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48cpbzgkvtewk0wu000000004pg00000000cq9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	52779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: ec2fedbd-401e-0083-3ba5-18075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48hzllksrq1r6zsvs00000001zg000000003bra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	52780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 66571c68-f01e-003f-2ae9-18d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48jwrqbupe3ktsx9w0000000500000000000w96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	52781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b80b7f3b-c01e-0046-499d-182db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48hzllksrq1r6zsvs00000001x0000000006866 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	52782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48sdh4cyzadbb374800000004ng00000000152b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	52783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48tnj6wmberkg2xy800000004rg0000000088z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	52784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48vhs7r2p1ky7cs5w0000000520000000003kxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	52785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd48qjg85buwfdynm5w00000004q000000000b3n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	52786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:49 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080449Z-1657d5bbd482lxwq1dp2t1zwkc00000004fg000000004ktz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	52791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:51 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:51 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080451Z-1657d5bbd48vlsxxpe15ac3q7n00000004t00000000010cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:51 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	52787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:51 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080451Z-1657d5bbd482lxwq1dp2t1zwkc00000004hg000000000x9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	52789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:51 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080451Z-1657d5bbd482krtfgrg72dfbtn00000004h0000000002hy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	52790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:51 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:51 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080451Z-1657d5bbd48brl8we3nu8cxwgn00000004zg000000007ymh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:51 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	52788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:51 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 2db88791-001e-0066-52ac-18561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080451Z-1657d5bbd48hzllksrq1r6zsvs00000002000000000026qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	52794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:52 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080452Z-1657d5bbd48jwrqbupe3ktsx9w00000004yg0000000038zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	52797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:52 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:52 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080452Z-1657d5bbd48xlwdx82gahegw4000000004t000000000cn0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:52 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	52795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:52 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:52 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b6b3ae71-d01e-0028-6ce6-187896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080452Z-1657d5bbd487nf59mzf5b3gk8n0000000490000000007ugm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:52 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	52796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:52 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6b09f5f6-b01e-0053-43a8-18cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080452Z-1657d5bbd48hzllksrq1r6zsvs000000020g000000001f6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	52798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48qjg85buwfdynm5w00000004wg000000000v1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	52799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48xlwdx82gahegw400000000500000000000mbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	52800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48tqvfc1ysmtbdrg000000004h0000000007gtx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	52801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48jwrqbupe3ktsx9w00000004x0000000005m2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	52802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd487nf59mzf5b3gk8n00000004d0000000002suv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	52805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48tqvfc1ysmtbdrg000000004ng000000002b91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	52804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48jwrqbupe3ktsx9w00000004x0000000005m37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	52803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:53 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:53 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080453Z-1657d5bbd48lknvp09v995n790000000046g00000000dncg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:53 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	52793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:54 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3c22684b-b01e-0084-63e7-18d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080454Z-1657d5bbd48wd55zet5pcra0cg00000004pg000000005upy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	52806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:54 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 92e59db7-001e-002b-6700-1799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080454Z-1657d5bbd48762wn1qw4s5sd3000000004f000000000ce0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	52807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:54 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:54 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080454Z-1657d5bbd48cpbzgkvtewk0wu000000004p000000000czm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:54 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	52808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:54 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:54 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7f686986-001e-0079-75e0-1812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080454Z-1657d5bbd48lknvp09v995n790000000047g00000000bka2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:54 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	52809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:54 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080454Z-1657d5bbd48xlwdx82gahegw4000000004ug000000009tf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	52810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd48jwrqbupe3ktsx9w00000004wg000000006t90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	52811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd48lknvp09v995n790000000047000000000ckk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	52812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd48tnj6wmberkg2xy800000004q000000000bd0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	52813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd487nf59mzf5b3gk8n00000004c0000000003zup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	52814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd482lxwq1dp2t1zwkc00000004e000000000748c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	52815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:55 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:55 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080455Z-1657d5bbd48jwrqbupe3ktsx9w00000004w00000000082yu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:55 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	52816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48vlsxxpe15ac3q7n00000004k000000000cucw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	52817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48dfrdj7px744zp8s00000004eg000000005pw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	52818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48wd55zet5pcra0cg00000004mg0000000094pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	52819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: cc92db4a-701e-0053-3460-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48lknvp09v995n79000000004b0000000005uy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	52821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48qjg85buwfdynm5w00000004ug000000004652 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	52823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e07611d1-201e-0085-2bab-1834e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48hzllksrq1r6zsvs0000000210000000000mw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	52824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48xsz2nuzq4vfrzg800000004kg000000005kvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	52822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1d7d761e-d01e-005a-76ef-187fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd482lxwq1dp2t1zwkc00000004f0000000004yxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	52825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:56 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:56 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 27cd2a1a-001e-0046-1b08-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080456Z-1657d5bbd48xdq5dkwwugdpzr000000005100000000056rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	52826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:57 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 4915fb4c-101e-0046-80b0-1891b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080457Z-1657d5bbd48hzllksrq1r6zsvs00000001v0000000009xnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	52829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:57 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:57 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8a5b80a7-801e-0067-69f1-18fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080457Z-1657d5bbd482lxwq1dp2t1zwkc00000004k00000000005q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	52828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:57 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080457Z-1657d5bbd48dfrdj7px744zp8s00000004h0000000001zru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	52827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:57 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080457Z-1657d5bbd482krtfgrg72dfbtn00000004e0000000006kr1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	52830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:57 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:57 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080457Z-1657d5bbd48lknvp09v995n790000000048000000000ab51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:57 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	52831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:58 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:58 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080458Z-1657d5bbd48q6t9vvmrkd293mg00000004qg000000004u32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:58 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	52833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:58 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:58 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080458Z-1657d5bbd48brl8we3nu8cxwgn0000000530000000001zb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:58 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	52834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:58 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080458Z-1657d5bbd48vlsxxpe15ac3q7n00000004n0000000009e81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	52832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:58 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080458Z-1657d5bbd48sqtlf1huhzuwq7000000004gg000000001rkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	52835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:58 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:58 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080458Z-1657d5bbd4824mj9d6vp65b6n400000004w00000000073a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	52836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd48qjg85buwfdynm5w00000004u0000000004yfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	52839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd48jwrqbupe3ktsx9w000000050g0000000000wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	52837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd4824mj9d6vp65b6n400000004x0000000005zw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	52838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd482lxwq1dp2t1zwkc00000004f0000000004z09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	52840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 360ff137-701e-0098-1c78-18395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd48hzllksrq1r6zsvs000000020g000000001fbk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	52841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:04:59 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd48t66tjar5xuq22r800000004p0000000006dhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:04:59 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	52842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd487nf59mzf5b3gk8n00000004a0000000006tqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	52843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:04:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080459Z-1657d5bbd48vlsxxpe15ac3q7n00000004s0000000002qnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	52844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:04:59 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48sdh4cyzadbb374800000004g0000000008nn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	52845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48vlsxxpe15ac3q7n00000004pg0000000062h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	52846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48brl8we3nu8cxwgn0000000510000000004yda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	52848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd4824mj9d6vp65b6n400000004xg000000005c6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	52847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48lknvp09v995n790000000046g00000000dnha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	52849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48xlwdx82gahegw4000000004xg000000005a9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	52850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:00 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:00 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:00 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080500Z-1657d5bbd48tnj6wmberkg2xy800000004u0000000004f92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:00 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	52851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:01 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:01 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:01 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080501Z-1657d5bbd48t66tjar5xuq22r800000004sg000000001be4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:01 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	52852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:01 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:01 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080501Z-1657d5bbd48qjg85buwfdynm5w00000004t0000000006f7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:01 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	52853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:01 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:01 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080501Z-1657d5bbd48jwrqbupe3ktsx9w00000004zg0000000023us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:01 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	52854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:01 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:01 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 72fa1ab1-901e-0016-03ed-18efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080501Z-1657d5bbd48wd55zet5pcra0cg00000004rg0000000030h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:01 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	52855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:01 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:01 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080501Z-1657d5bbd48t66tjar5xuq22r800000004r0000000003ef3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	52858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:02 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:02 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080502Z-1657d5bbd4824mj9d6vp65b6n400000004x0000000006008 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	52860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:02 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:02 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080502Z-1657d5bbd4824mj9d6vp65b6n400000004v0000000008nh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:02 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	52857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:02 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:02 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080502Z-1657d5bbd48sdh4cyzadbb374800000004ng0000000015kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:02 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	52859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:02 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:02 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080502Z-1657d5bbd48jwrqbupe3ktsx9w00000004t000000000ctya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:02 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	52862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:03 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080503Z-1657d5bbd48xsz2nuzq4vfrzg800000004f000000000cb8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:03 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	52864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:03 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:03 UTC	564	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:03 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: fb7942a0-101e-0046-0e58-1991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080503Z-1657d5bbd48xjgsr3pyv9u71rc00000000qg0000000067bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 08:05:03 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	52863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:03 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:03 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080503Z-1657d5bbd48cpbzgkvtewk0wu000000004r0000000009yra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:03 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	52861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:03 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080503Z-1657d5bbd48q6t9vvmrkd293mg00000004mg0000000096k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	52856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:03 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:03 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a30abe55-a01e-006f-7851-1913cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080503Z-1657d5bbd48xjgsr3pyv9u71rc00000000hg000000008ubs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	52865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48762wn1qw4s5sd3000000004n0000000003hq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	52866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48xdq5dkwwugdpzr00000000510000000005713 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	52867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48xsz2nuzq4vfrzg800000004pg000000000mgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	52868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48tnj6wmberkg2xy800000004wg000000000g3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	52869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48xlwdx82gahegw4000000004z0000000002q1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	52870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd482krtfgrg72dfbtn00000004bg00000000a9g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	52871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48cpbzgkvtewk0wu000000004ug000000003nc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	52873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48vlsxxpe15ac3q7n00000004m000000000ay9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	52872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 52963dc7-601e-0084-0e74-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48tnj6wmberkg2xy800000004u0000000004fcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	52874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:04 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:04 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080504Z-1657d5bbd48tqvfc1ysmtbdrg000000004fg000000009m52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:04 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	52876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:05 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:05 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080505Z-1657d5bbd48tnj6wmberkg2xy800000004t00000000069bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:05 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	52875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:05 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:05 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080505Z-1657d5bbd48brl8we3nu8cxwgn00000004xg00000000at9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:05 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	52878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:05 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:05 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080505Z-1657d5bbd48sqtlf1huhzuwq7000000004fg000000002zbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:05 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	52877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:05 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:05 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080505Z-1657d5bbd48sqtlf1huhzuwq7000000004g0000000002ukh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:05 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	52879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:05 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:05 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080505Z-1657d5bbd48762wn1qw4s5sd3000000004pg000000000b0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:05 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	52880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:06 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:06 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080506Z-1657d5bbd48t66tjar5xuq22r800000004hg00000000d424 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:06 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	52881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:06 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:06 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 1eaf42aa-001e-0014-79db-185151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080506Z-1657d5bbd482krtfgrg72dfbtn00000004gg0000000026x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:06 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	52882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:06 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:06 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080506Z-1657d5bbd48xdq5dkwwugdpzr0000000053g000000001286 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	52883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:06 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:06 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 60d36a58-001e-0079-5797-1812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080506Z-1657d5bbd48hzllksrq1r6zsvs00000001w0000000007x2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:06 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	52884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:06 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:06 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080506Z-1657d5bbd48t66tjar5xuq22r800000004s0000000002ud8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:06 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	52886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48lknvp09v995n79000000004c0000000003t4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	52885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48762wn1qw4s5sd3000000004k00000000069c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	52887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48cpbzgkvtewk0wu000000004t0000000006t4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	52888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48xdq5dkwwugdpzr00000000520000000003kc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	52889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48xlwdx82gahegw4000000004z0000000002q5m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	52891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48tnj6wmberkg2xy800000004t00000000069en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	52890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 4833e4a9-401e-0047-05a5-188597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48hzllksrq1r6zsvs000000020g000000001fh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:07 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	52892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48jwrqbupe3ktsx9w00000004wg000000006tuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:08 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	52893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:07 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080507Z-1657d5bbd48dfrdj7px744zp8s00000004g0000000003nqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:08 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	52894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:07 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:08 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:08 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 75ef523f-601e-000d-02f2-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080508Z-1657d5bbd48wd55zet5pcra0cg00000004m000000000acy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:08 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	52897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:09 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:09 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080509Z-1657d5bbd48vhs7r2p1ky7cs5w00000004wg00000000cbyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:09 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	52895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:09 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:09 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080509Z-1657d5bbd482lxwq1dp2t1zwkc00000004c0000000009xvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:09 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	52899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:09 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:09 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 9ee449bf-c01e-0079-5e9f-18e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080509Z-1657d5bbd48hzllksrq1r6zsvs00000001zg000000003c6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:09 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	52898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:09 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:09 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3e7839e3-701e-0053-5cff-163a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080509Z-1657d5bbd48qjg85buwfdynm5w00000004wg000000000vbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:09 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	52896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:09 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:09 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:09 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080509Z-1657d5bbd48tnj6wmberkg2xy800000004v0000000003827 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:09 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	52901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dfa7567c-f01e-003f-67de-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd48dfrdj7px744zp8s00000004cg000000008gxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	52904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b1fbfe33-a01e-003d-4fd4-1698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd48xdq5dkwwugdpzr00000000510000000005792 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	52900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd482krtfgrg72dfbtn00000004k00000000005wb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	52902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd482lxwq1dp2t1zwkc00000004b000000000c9tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	52903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7d18055e-701e-0098-56ff-16395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd48lknvp09v995n79000000004a0000000006n4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	52906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 096083c7-101e-008d-1673-1792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd48sqtlf1huhzuwq7000000004cg000000008cg5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	52905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 08:05:10 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 08:05:10 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 08:05:10 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 770fdf22-501e-0035-0d02-17c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T080510Z-1657d5bbd48vlsxxpe15ac3q7n00000004kg00000000ba5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 08:05:10 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6112, Parent PID: 3400

General

Target ID:	0
Start time:	04:03:46
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5796, Parent PID: 6112

General

Target ID:	2
Start time:	04:03:49
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2024,i,15333744745124969845,5568448262312495137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6368, Parent PID: 3400

General

Target ID:	3
Start time:	04:03:52
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6112, Parent PID: 3400

General

Windows Analysis Report
https://evicertia.com/Delivery/019247e7-307b-4d79-bf99-a300cd1f6d97