Edit tour

Windows Analysis Report
https://support-ld-maps.info/icloud-archivos/code2022esp.php

Overview

General Information

Sample URL:	https://support-ld-maps.info/icloud-archivos/code2022esp.php
Analysis ID:	1532574
Tags:	openphish
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2204,i,13424152147592093039,6643963405431631558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://support-ld-maps.info/icloud-archivos/code2022esp.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-13T17:48:37.384117+0200	2018334	2	Potentially Bad Traffic	50.6.138.164	443	192.168.2.4	49735	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on favicon image match)

Source: https://support-ld-maps.info

Matcher: Template: apple matched with high similarity

Source: https://support-ld-maps.info/icloud-archivos/code2022esp.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:51125 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:51122 -> 1.1.1.1:53

Source: Network traffic

Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 50.6.138.164:443 -> 192.168.2.4:49735

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /icloud-archivos/code2022esp.php HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/fonts.css HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/app.css HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/style.css HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support-ld-maps.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support-ld-maps.info/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support-ld-maps.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support-ld-maps.info/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: support-ld-maps.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: support-ld-maps.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support-ld-maps.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support-ld-maps.info/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support-ld-maps.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support-ld-maps.info/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support-ld-maps.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support-ld-maps.info/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support-ld-maps.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: support-ld-maps.info
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:48:38 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:48:38 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:48:39 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:48:39 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html

Source: chromecache_48.2.dr, chromecache_51.2.dr, chromecache_50.2.dr	String found in binary or memory: http://code.jquery.com/jquery-3.3.1.min.js
Source: chromecache_48.2.dr, chromecache_51.2.dr, chromecache_50.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_45.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: chromecache_45.2.dr	String found in binary or memory: https://www.icloud.com-ns.us/aU3V1/mobile/code.php

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51268
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51271
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 51256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 51153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 51129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 51181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 51158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 51130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51229
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51228
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51221
Source: unknown	Network traffic detected: HTTP traffic on port 51243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51224
Source: unknown	Network traffic detected: HTTP traffic on port 51131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51239
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51231
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51235
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51240
Source: unknown	Network traffic detected: HTTP traffic on port 51125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51244
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51247
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 51171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51251
Source: unknown	Network traffic detected: HTTP traffic on port 51231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 51193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51256
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51257
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51260
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 51148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 51201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 51155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 51189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 51197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 51133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 51260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51188
Source: unknown	Network traffic detected: HTTP traffic on port 51134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51189
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51187
Source: unknown	Network traffic detected: HTTP traffic on port 51228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51194
Source: unknown	Network traffic detected: HTTP traffic on port 51128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51197
Source: unknown	Network traffic detected: HTTP traffic on port 51195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51198
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:51125 version: TLS 1.2

Source: classification engine

Classification label: sus21.phis.win@16/28@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2204,i,13424152147592093039,6643963405431631558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://support-ld-maps.info/icloud-archivos/code2022esp.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2204,i,13424152147592093039,6643963405431631558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://gmpg.org/xfn/11	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
support-ld-maps.info	50.6.138.164	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://support-ld-maps.info/icloud-archivos/myriad-set-pro_thin.ttf	true	unknown
https://support-ld-maps.info/icloud-archivos/myriad-set-pro_text.woff	true	unknown
https://support-ld-maps.info/icloud-archivos/myriad-set-pro_text.ttf	true	unknown
https://support-ld-maps.info/sep.png	true	unknown
https://support-ld-maps.info/icloud-archivos/app.css	true	unknown
https://support-ld-maps.info/favicon.ico	true	unknown
https://support-ld-maps.info/icloud-archivos/myriad-set-pro_thin.woff	true	unknown
https://support-ld-maps.info/icloud-archivos/fonts.css	true	unknown
https://support-ld-maps.info/assets/img/ajax-loader.gif	true	unknown
https://support-ld-maps.info/icloud-archivos/style.css	true	unknown
https://support-ld-maps.info/icloud-archivos/code2022esp.php	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://code.jquery.com/jquery-3.3.1.min.js	chromecache_48.2.dr, chromecache_51.2.dr, chromecache_50.2.dr	false		unknown
http://gmpg.org/xfn/11	chromecache_48.2.dr, chromecache_51.2.dr, chromecache_50.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
50.6.138.164	support-ld-maps.info	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532574
Start date and time:	2024-10-13 17:47:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://support-ld-maps.info/icloud-archivos/code2022esp.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.phis.win@16/28@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.110, 142.251.168.84, 172.217.16.195, 34.104.35.123, 142.250.186.170, 216.58.206.74, 172.217.16.138, 142.250.186.138, 142.250.181.234, 172.217.16.202, 142.250.186.74, 142.250.186.42, 142.250.185.170, 216.58.212.170, 142.250.186.106, 142.250.184.202, 142.250.185.234, 142.250.184.234, 142.250.74.202, 172.217.18.10, 142.250.185.202, 20.12.23.50, 93.184.221.240, 192.229.221.95, 20.242.39.171, 52.165.164.15, 40.69.42.241, 131.107.255.255, 142.250.184.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://support-ld-maps.info/icloud-archivos/code2022esp.php

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://support-ld-maps.info/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "text": "Ingrese el cdigo de desbloqueo del dispositivo Ingrese su cdigo de desbloqueo para ver la ubicacin actual de tus dispositivos", "contains_trigger_text": true, "trigger_text": "Ingrese el cdigo de desbloqueo del dispositivo", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: https://support-ld-maps.info/icloud-archivos/code2022esp.php Model: jbxai	{ "brands":[], "text":"Ingresar el cdigo de desbloqueo del dispositivo", "contains_trigger_text":true, "trigger_text":"Ingresar el cdigo de desbloqueo del dispositivo", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support-ld-maps.info/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "brands": []}
	{ "brands": []}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (898)
Category:	downloaded
Size (bytes):	9582
Entropy (8bit):	5.063185497103647
Encrypted:	false
SSDEEP:	96:hQrcYi3QkR+uHWeF1UAO1jXg1afUpnJLOJ32dZIGOPft3/DDV4VXS+I9:kc5AkrNE5UnLOEOr93/DDVAXS+I9
MD5:	166ADB6D0DB898BD46EFCC2F503F0F0F
SHA1:	8B95DDA3AE2B79ECEB6AB2CA7C1913C962E86C33
SHA-256:	1AE8B700CC9A866E45912A77BA8DA20C203F8355FF0FA9E8E92F22956FFD173E
SHA-512:	472824F87123C6F8C641B4674A7B56FB89DA2512001189185776D91AFF329684E5A5B0B2BD4EFE4B261E1A4F56FB208883651136CEDF4709D3319F4200F649E9
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/code2022esp.php
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. saved from url=(0050)https://www.icloud.com-ns.us/aU3V1/mobile/code.php -->.<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. . <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">. <link rel="prefetch stylesheet" href="./fonts.css" type="text/css">. <link rel="stylesheet" type="text/css" media="screen" href="./app.css">. <link rel="stylesheet" type="text/css" media="screen" href="./style.css">.. . . . .<style type="text/css"></style></head>.<body>.<div class="si-body si-container container-fluid" id="content" data-theme="lite"><apple-auth> <appleid-logo mode="{mode}">.<div id="apple-id-logo" class="apple-id-logo hide-always">. <i class="icon icon_apple"></i>.</div>..</appleid-logo>.<div class="widget-container fade-in restrict-max-wh fade-in" data-mode="embe

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (358)
Category:	downloaded
Size (bytes):	11816
Entropy (8bit):	5.037139572888145
Encrypted:	false
SSDEEP:	192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s
MD5:	A8063BD37D3C8FB3176A6BF140558A4D
SHA1:	E32CF4B407DB3D3773DED13FF64B70FDBAD7735F
SHA-256:	BCCB23D41C2CC69CF0C7D22C4314CA8181A513C6999B73E45307792830F4E482
SHA-512:	82D749F6B17B21587FB345CA196A2AA83ECA80AD66ED9C1AB88B36709BED14175D53AFEFE9ACC0DAFC4FAD78FFB8DF155193A6829BC857AD6D68B1C84AF7B854
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/myriad-set-pro_text.woff
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head profile="http://gmpg.org/xfn/11">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>404 - PAGE NOT FOUND</title>...... Add Slide Outs -->.....<script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> .....<script src="/cgi-sys/js/simple-expand.min.js"></script>. . <style type="text/css">. body{padding:0;margin:0;font-family:helvetica;}. #container{margin:20px auto;width:868px;}. #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;}. #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;}. #container #mid404 #gatorbottom{position:relative;left:39px;float:left;}. #

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (358)
Category:	downloaded
Size (bytes):	11816
Entropy (8bit):	5.037139572888145
Encrypted:	false
SSDEEP:	192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s
MD5:	A8063BD37D3C8FB3176A6BF140558A4D
SHA1:	E32CF4B407DB3D3773DED13FF64B70FDBAD7735F
SHA-256:	BCCB23D41C2CC69CF0C7D22C4314CA8181A513C6999B73E45307792830F4E482
SHA-512:	82D749F6B17B21587FB345CA196A2AA83ECA80AD66ED9C1AB88B36709BED14175D53AFEFE9ACC0DAFC4FAD78FFB8DF155193A6829BC857AD6D68B1C84AF7B854
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/myriad-set-pro_thin.ttf
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head profile="http://gmpg.org/xfn/11">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>404 - PAGE NOT FOUND</title>...... Add Slide Outs -->.....<script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> .....<script src="/cgi-sys/js/simple-expand.min.js"></script>. . <style type="text/css">. body{padding:0;margin:0;font-family:helvetica;}. #container{margin:20px auto;width:868px;}. #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;}. #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;}. #container #mid404 #gatorbottom{position:relative;left:39px;float:left;}. #

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (358)
Category:	downloaded
Size (bytes):	11816
Entropy (8bit):	5.037139572888145
Encrypted:	false
SSDEEP:	192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s
MD5:	A8063BD37D3C8FB3176A6BF140558A4D
SHA1:	E32CF4B407DB3D3773DED13FF64B70FDBAD7735F
SHA-256:	BCCB23D41C2CC69CF0C7D22C4314CA8181A513C6999B73E45307792830F4E482
SHA-512:	82D749F6B17B21587FB345CA196A2AA83ECA80AD66ED9C1AB88B36709BED14175D53AFEFE9ACC0DAFC4FAD78FFB8DF155193A6829BC857AD6D68B1C84AF7B854
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/myriad-set-pro_thin.woff
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head profile="http://gmpg.org/xfn/11">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>404 - PAGE NOT FOUND</title>...... Add Slide Outs -->.....<script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> .....<script src="/cgi-sys/js/simple-expand.min.js"></script>. . <style type="text/css">. body{padding:0;margin:0;font-family:helvetica;}. #container{margin:20px auto;width:868px;}. #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;}. #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;}. #container #mid404 #gatorbottom{position:relative;left:39px;float:left;}. #

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.332758651241789
Encrypted:	false
SSDEEP:	3:O2PRk5xCunnVKekY:OEkLCokY
MD5:	4C73EF2C5836B2524CF0DCF05C5A5E1E
SHA1:	A3C11721A416039DDF8328DBC0C24C270F75C3AB
SHA-256:	462CCC2B7B8048DBE77886E203959F49B02EDA47C9AF39F22BFD649D219A44F1
SHA-512:	DF21A0EA934263545DDF076D2BB84A76FA6906BAD1EC5A8D2DD268E62E2A69827107FF0B7F09CF96879B5FE8A23502F53934B7FF72228537BB4EBCCFC835241D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQmKgh_TzCsJ4xIFDYJGpz8SBQ0Dp5DTEgUNaenAthIFDUGn_58=?alt=proto
Preview:	CiQKBw2CRqc/GgAKBw0Dp5DTGgAKBw1p6cC2GgAKBw1Bp/+fGgA=

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	404
Entropy (8bit):	5.104933128586477
Encrypted:	false
SSDEEP:	12:XlVTgIC++jjdt08cKHwLQcYahZR3Xzjbck1ZM:X7EIC+YjLVcjLBVvFj317M
MD5:	34967D55AD27C484A0BBE6BCACAEDA03
SHA1:	B49A5B6BA6538271C3EC0F82B756BAE7998312AD
SHA-256:	611040FEE1945FFE3BB8C8581F1622C4A5FAFF722B00FAA254359A170F7E71F2
SHA-512:	C652A692960CA99E22EADA7AE75A206B5D50BE098991279AE6BF2A5BC52437DC4E7E406764BC37AC4AFBED79F73FE8A16675349C7F3C8F25B786F82FF1ED7A13
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/style.css
Preview:	.errorlogin {.background-color: #FAE9A3;.position: absolute;.width:70%;.margin-left: -37%;.border-radius: 5px;.left: 52%;.padding: 1em;.border: 1px solid rgba(185,149,1,0.47);.box-shadow: 0px 5px 10px 2px rgba(0,0,0,0.1);.margin-top: 9px;.padding: 15px;.color: #503E30;.font-weight: 400;.text-align: center;.z-index: 10;.font-size: 15px;.letter-spacing: -0.016em;.font-weight: 500;.font-family: arial;.}

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/sep.png
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4391
Entropy (8bit):	5.193204943336862
Encrypted:	false
SSDEEP:	24:EUasapQXl/bQKadaCQXlSwa+Xl/bQUaFaaQXl/EkavkavK6QXl/bQikavlav6QX7:EseItUX8FiBzM4qCZ0Ib
MD5:	98EE635650C7CCDA9930ADFC60219383
SHA1:	E03849F92A5DEA9E750A46FBDC7EC38566D87B47
SHA-256:	8BB6308810E034853E1CB335372AFCC0243DD73F3A431AE888FF0B4313B97251
SHA-512:	A1754FD3719C9A01A2B8D96758E3D91A419A0EA43A65120DB5B1C2A6A04F3D328184244452EE4E5F413E28286952560162AA9C3A73209F318FE98518572E6BC4
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/fonts.css
Preview:	@font-face {..font-family:'Myriad Set Pro';..font-style:normal;..font-weight:200;..src:local('..'), url("./myriad-set-pro_thin.woff") format("woff"), url("./myriad-set-pro_thin.ttf") format("truetype");../* Copyright (c) 1992 Adobe Systems Incorporated. All Rights Reserved. Myriad is a trademark of Adobe Systems Incorporated. /.}..@font-face {..font-family:'Myriad Set Pro';..font-style:italic;..font-weight:200;..src:local('..'), url("./myriad-set-pro_thin-italic.woff") format("woff"), url("./myriad-set-pro_thin-italic.ttf") format("truetype");../ Copyright (c) 1992 Adobe Systems Incorporated. All Rights Reserved. Myriad is a trademark of Adobe Systems Incorporated. /.}..@font-face {..font-family:'Myriad Set Pro 200';..src:url("./myriad-set-pro_thin.eot");../ Copyright (c) 1992 Adobe Systems Incorporated. All Rights Reserved. Myriad is a trademark of Adobe Systems Incorporated. */.}..@font-face {..font-family:'Myriad Set Pro';..font-style:italic;..font-weight:400;..src:local

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	82736
Entropy (8bit):	5.188382462050499
Encrypted:	false
SSDEEP:	768:p3DE+MKeKEamqCwcMOEkSqyWmA0i4OoIIWabTPXhY3Zzw9/D+FLly/LHRMTtfwNc:p32x6g+g8GlJ532PVwJgjCWyLnL
MD5:	F6879EEF31E55654B039B091AADEEE8E
SHA1:	29969D2D39AF6E453A03B612FBFFC007E79A3310
SHA-256:	A4C47AB92567B53E340EC45955BCF553BB99D3141EEDB45993C2494B29834E91
SHA-512:	CC646422604250DEBC3CA63A75E4B7EF93D0A04E1BE769688FF2024A94548555128BD5C1A86787485EE6BA4E654CDF78CAE0B4056FDACF0E3B7AAFEF5060EBCA
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/icloud-archivos/app.css
Preview:	html {..font-family: sans-serif;..-ms-text-size-adjust: 100%;..-webkit-text-size-adjust: 100%;.}..body {..margin: 0;.}..article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {..display: block;.}..audio,.canvas,.progress,.video {..display: inline-block;..vertical-align: baseline;.}..audio:not([controls]) {..display: none;..height: 0;.}..[hidden],.template {..display: none;.}..a {..background-color: transparent;.}..a:active,.a:hover {..outline: 0;.}..abbr[title] {..border-bottom: 1px dotted;.}..b,.strong {..font-weight: bold;.}..dfn {..font-style: italic;.}..h1 {..font-size: 2em;..margin: 0.67em 0;.}..mark {..background: #ff0;..color: #000;.}..small {..font-size: 80%;.}..sub,.sup {..font-size: 75%;..line-height: 0;..position: relative;..vertical-align: baseline;.}..sup {..top: -0.5em;.}..sub {..bottom: -0.25em;.}..img {..border: 0;.}..svg:not(:root) {..overflow: hidden;.}..figure {..margin: 1em 40px;.}..hr {..box-sizing: content-box;..heig

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
URL:	https://support-ld-maps.info/assets/img/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-13T17:48:37.384117+0200	2018334	ET PHISHING Possible Phish - Saved Website Comment Observed	2	50.6.138.164	443	192.168.2.4	49735	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 17:48:26.583930969 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 17:48:36.191819906 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 17:48:36.729690075 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.729790926 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:36.729995966 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.730142117 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.730199099 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:36.730295897 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.730326891 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:36.730416059 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.730633974 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:36.730648041 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.235122919 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.235569000 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.235639095 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.236031055 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.236115932 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.236706972 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.236763000 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.237581968 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.237679005 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.237768888 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.237787962 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.249521017 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.249752998 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.249783993 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.250169039 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.250252962 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.250792027 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.250861883 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.251070023 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.251123905 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.292692900 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.292773008 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.292788982 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.339652061 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.383603096 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383635044 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383666992 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383681059 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383780003 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.383852959 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383884907 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383948088 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.383964062 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.383990049 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.384047031 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.384637117 CEST	49735	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.384669065 CEST	443	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.404160023 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.404599905 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.404644012 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.404711008 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.404972076 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.404985905 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.405432940 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.405483961 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.405546904 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.405734062 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.405750990 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.451416969 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.527512074 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.527535915 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.527544022 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.527616024 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.527671099 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.529172897 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.529226065 CEST	443	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.529283047 CEST	49736	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531131029 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531177998 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.531243086 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531505108 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531517029 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.531562090 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531763077 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531774998 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.531987906 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.531999111 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.906510115 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.906856060 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.906889915 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.907249928 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.907314062 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.907931089 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.907972097 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.908296108 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.908351898 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.908679008 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.908684969 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.910772085 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.911449909 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.911475897 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.912796021 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.913310051 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.913453102 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.913489103 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:37.958436966 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:37.958625078 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.037802935 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048634052 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048706055 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048727036 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048760891 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.048790932 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048804045 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.048872948 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.048954010 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.049005985 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.052158117 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.053786039 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.053802967 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.053900003 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.053905964 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.055160046 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.055213928 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.055278063 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.055335045 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.057524920 CEST	49740	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.057554960 CEST	443	49740	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.057660103 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.057708025 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.057914019 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.057955980 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.058821917 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.058996916 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.059628963 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.059804916 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.060683012 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.060693979 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.060786963 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.060794115 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.067508936 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.067585945 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.067595959 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.110677004 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.113164902 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.113168955 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.136861086 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.136884928 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.136921883 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.137044907 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.137044907 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.137814999 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.137833118 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.137866020 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.137882948 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.155668974 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.155692101 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.155745029 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.155783892 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.156172037 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.156193972 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.156227112 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.156244040 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.179873943 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.179939032 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.180001974 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.192559004 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.192586899 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.192645073 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.192651987 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.192701101 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.208805084 CEST	49742	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.208822012 CEST	443	49742	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.209117889 CEST	49741	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.209121943 CEST	443	49741	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.225189924 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.225279093 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.225785971 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.225863934 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.226682901 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.226759911 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.227339983 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.227412939 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.227821112 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.227880001 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.227894068 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.227989912 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.228044033 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.228246927 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.228260994 CEST	443	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.228267908 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.228303909 CEST	49739	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.263564110 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.263626099 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.263684988 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.264019012 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.264070988 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.264123917 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.264266014 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.264280081 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.264477968 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.264488935 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.422517061 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:38.422619104 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:38.422702074 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:38.422879934 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:38.422904015 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:38.433815956 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.433851004 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.433913946 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.433964014 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.434000969 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.434043884 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.434195042 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.434225082 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.434330940 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.434340954 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.765156984 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.765414953 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.765459061 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.765522003 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.765722036 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.765794992 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.765929937 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.766165972 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.766247988 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.766323090 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.766483068 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.766572952 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.766608000 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.766644001 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.807405949 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.807421923 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905159950 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905186892 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905374050 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.905426979 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905592918 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905646086 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.905682087 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905703068 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.905760050 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.906106949 CEST	49745	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.906137943 CEST	443	49745	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.906732082 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.906817913 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.907004118 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.907025099 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.907109022 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.907150030 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.907159090 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.907159090 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.907193899 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.909991980 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.910043001 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.910139084 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.910182953 CEST	49744	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.910219908 CEST	443	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.910466909 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.910486937 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.915637016 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.915653944 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.915741920 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.916019917 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.916033030 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.935180902 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.935584068 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.935621977 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.936003923 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.936084986 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.936702967 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.936753035 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.936904907 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.936978102 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.937131882 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.938329935 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.938505888 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.938520908 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.938951969 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.939011097 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.939647913 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.939694881 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.939810991 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.939866066 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.939891100 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.976464987 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.976484060 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.983398914 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:38.991761923 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:38.991770983 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.022636890 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.036931038 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.076508999 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:39.077233076 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:39.077264071 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:39.078808069 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:39.078902006 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:39.079791069 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:39.079792023 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.079859018 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.079864979 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:39.079925060 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.080665112 CEST	49747	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.080683947 CEST	443	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.081773043 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.081849098 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.081926107 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.081942081 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.082003117 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.082057953 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.084438086 CEST	49748	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.084453106 CEST	443	49748	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.110786915 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.110824108 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:39.110914946 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.112387896 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.112397909 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:39.131244898 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:39.131262064 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:39.177890062 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:39.420289040 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.420536995 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.420561075 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.420890093 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.421164036 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.421231985 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.421263933 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.425442934 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.425601006 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.425610065 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.425960064 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.426208019 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.426263094 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.426270008 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.463416100 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.467441082 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.472847939 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.472847939 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.561449051 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561517954 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561541080 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561558962 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561609983 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.561633110 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561667919 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.561698914 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561755896 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.561764956 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561805010 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.561855078 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.561911106 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.562510967 CEST	49749	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.562529087 CEST	443	49749	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.566874981 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.566901922 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.566910982 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.566976070 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.566986084 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.567429066 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.567497015 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.567501068 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.567548037 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.568448067 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.568453074 CEST	443	49750	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.568464994 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.568511009 CEST	49750	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.572760105 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.572792053 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.572864056 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.573112011 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:39.573122978 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:39.840143919 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:39.840233088 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.842257977 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.842272997 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:39.842506886 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:39.885761976 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.897722006 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:39.943397999 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.082890987 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.083072901 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.083087921 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.084342957 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.085167885 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.085282087 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.085287094 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.085352898 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.127852917 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.167886972 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.167942047 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.167989969 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.168083906 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.168106079 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.168117046 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.168123007 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.219850063 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.219913006 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.219933033 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.219969988 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.219985008 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.220000982 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.220159054 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.220211029 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.220597029 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.220637083 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.220690966 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.221384048 CEST	49755	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.221394062 CEST	443	49755	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.222579956 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.222604990 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.241183043 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.241203070 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.241261959 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.241427898 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.241441965 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.775253057 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.775526047 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.775557041 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.776885033 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.777184010 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.777292967 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.777359962 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.833039999 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.918885946 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.918919086 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.918926954 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.918957949 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.918970108 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.918976068 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.919009924 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.919025898 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.919038057 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.919080973 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.932296038 CEST	49757	443	192.168.2.4	50.6.138.164
Oct 13, 2024 17:48:40.932327032 CEST	443	49757	50.6.138.164	192.168.2.4
Oct 13, 2024 17:48:40.936738014 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.936804056 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.938110113 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.938121080 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.938471079 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:40.940409899 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:40.987400055 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:41.267986059 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:41.268156052 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:41.268330097 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:41.269016027 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:41.269040108 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:41.269138098 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:48:41.269145966 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 13, 2024 17:48:48.982098103 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:48.982198954 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:48.982255936 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:50.742945910 CEST	49746	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:48:50.742990971 CEST	443	49746	172.217.18.4	192.168.2.4
Oct 13, 2024 17:48:52.201456070 CEST	51122	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:52.206434965 CEST	53	51122	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.206592083 CEST	51122	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:52.206634998 CEST	51122	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:52.211464882 CEST	53	51122	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.664808989 CEST	53	51122	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.665745974 CEST	51122	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:52.671200037 CEST	53	51122	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.671277046 CEST	51122	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:54.488729000 CEST	80	49723	87.248.204.0	192.168.2.4
Oct 13, 2024 17:48:54.488940954 CEST	49723	80	192.168.2.4	87.248.204.0
Oct 13, 2024 17:48:54.488940954 CEST	49723	80	192.168.2.4	87.248.204.0
Oct 13, 2024 17:48:54.489514112 CEST	80	49723	87.248.204.0	192.168.2.4
Oct 13, 2024 17:48:54.489738941 CEST	49723	80	192.168.2.4	87.248.204.0
Oct 13, 2024 17:48:54.493987083 CEST	80	49723	87.248.204.0	192.168.2.4
Oct 13, 2024 17:49:09.260303020 CEST	80	49724	87.248.204.0	192.168.2.4
Oct 13, 2024 17:49:09.260476112 CEST	49724	80	192.168.2.4	87.248.204.0
Oct 13, 2024 17:49:09.260476112 CEST	49724	80	192.168.2.4	87.248.204.0
Oct 13, 2024 17:49:09.265338898 CEST	80	49724	87.248.204.0	192.168.2.4
Oct 13, 2024 17:49:30.884088039 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:30.884129047 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:30.884506941 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:30.884506941 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:30.884540081 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.555689096 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.555840015 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.559204102 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.559218884 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.559726000 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.570543051 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.611433983 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.673429012 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.673492908 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.673537016 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.673556089 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.673573971 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.673587084 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.673616886 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.758322954 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.758394957 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.758411884 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.758431911 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.758486986 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.760051966 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.760108948 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.760130882 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.760155916 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.760164976 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.760202885 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.846430063 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.846461058 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.846496105 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.846513033 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.846541882 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.846560001 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.848396063 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.848417997 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.848460913 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.848468065 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.848495007 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.848507881 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.850452900 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.850477934 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.850514889 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.850527048 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.850552082 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.850577116 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.851919889 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.851964951 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.851983070 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.851989985 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.852013111 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.852025032 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.935599089 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.935668945 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.935678005 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.935694933 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.935734987 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.935754061 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.937359095 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.937407017 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.937427998 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.937434912 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.937460899 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.937479019 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.938404083 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.938460112 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.938482046 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.938488007 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.938514948 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.938532114 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.940112114 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.940155983 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.940176964 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.940202951 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.940205097 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.940252066 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.941890955 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.941939116 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.941939116 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.941971064 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.941977978 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.941992998 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.942011118 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.943769932 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.943829060 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.943840027 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.943854094 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.943881035 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.943901062 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.943952084 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.944013119 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.944020033 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.944082975 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.944087982 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.944112062 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.944139004 CEST	51125	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.944156885 CEST	443	51125	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.991508007 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.991539955 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.991626978 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.992608070 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.992702007 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.992778063 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.993300915 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.993310928 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.994172096 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.994225025 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.994276047 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.994375944 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.994385958 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.994674921 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.994748116 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.995345116 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.995452881 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.995522022 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.995637894 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.995661974 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.996406078 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.996436119 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:31.996504068 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.996795893 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:31.996824980 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.651026964 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.651092052 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.652813911 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.654056072 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.656971931 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.657007933 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.658216953 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.658222914 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.658987045 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.659001112 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.659867048 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.659872055 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.660752058 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.660808086 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.661560059 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.661629915 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.661639929 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.662277937 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.662312031 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.662874937 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.662888050 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.663888931 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.663897038 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.664539099 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.664545059 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.755301952 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.755331993 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.755389929 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.755418062 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.755436897 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.755485058 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.756957054 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.757183075 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.757255077 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.758078098 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.758169889 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.758243084 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.759798050 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.759825945 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.759876966 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.759913921 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.759936094 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.759957075 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.759984016 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.762227058 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.762248039 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.762317896 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.762367964 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.762402058 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.762574911 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.779970884 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.779993057 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.780002117 CEST	51128	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.780006886 CEST	443	51128	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.780108929 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.780162096 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.780184031 CEST	51127	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.780194044 CEST	443	51127	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.784246922 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.784248114 CEST	51129	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.784317970 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.784352064 CEST	443	51129	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.787350893 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.787374020 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.787395000 CEST	51126	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.787400007 CEST	443	51126	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.789278030 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.789298058 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.789323092 CEST	51130	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.789339066 CEST	443	51130	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.860977888 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.861018896 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.861099005 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.878443956 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.878460884 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.883599043 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.883639097 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.883718967 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.884546995 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.884558916 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.885766029 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.885874987 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.885960102 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.886486053 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.886532068 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.888922930 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.888989925 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.889053106 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.889219046 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.889250994 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.891462088 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.891473055 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:32.891549110 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.891772985 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:32.891784906 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.599772930 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.600179911 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.606508017 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.608063936 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.610830069 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.612246990 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.612273932 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.613395929 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.613399982 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.614124060 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.614149094 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.614718914 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.614725113 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.615319014 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.615331888 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.616339922 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.616344929 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.616832972 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.616847038 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.617603064 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.617608070 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.618279934 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.618307114 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.619498014 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.619513035 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.713668108 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.713745117 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.713840008 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.714752913 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.714790106 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.714826107 CEST	51134	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.714842081 CEST	443	51134	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.714962959 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.715102911 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.715156078 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.715991974 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.716073036 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.716121912 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.716139078 CEST	51135	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.716152906 CEST	443	51135	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.716583967 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.716669083 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.716722012 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.717972040 CEST	51133	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.717988014 CEST	443	51133	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.718595982 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.718751907 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.718812943 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.719715118 CEST	51131	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.719731092 CEST	443	51131	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.722296953 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.722301006 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.722348928 CEST	51132	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.722353935 CEST	443	51132	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.735189915 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.735215902 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.735551119 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.737970114 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.738027096 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.738253117 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.738465071 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.738477945 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.739639044 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.739691019 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.741908073 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.741951942 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.742019892 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.742301941 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.742326975 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.744327068 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.744340897 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.744596958 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.746503115 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.746526003 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.746706963 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.746901035 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.746911049 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:33.747359037 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:33.747370005 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.401567936 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.402337074 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.402403116 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.403079033 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.403131962 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.405826092 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.406622887 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.406656981 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.407337904 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.407342911 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.416205883 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.416829109 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.416857958 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.417661905 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.417668104 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.430915117 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.431463003 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.431521893 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.432104111 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.432111979 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.439065933 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.439359903 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.439366102 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.440243006 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.440246105 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.507006884 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.507080078 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.507226944 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.507294893 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.507323027 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.507340908 CEST	51138	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.507348061 CEST	443	51138	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.509852886 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.509896994 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.510013103 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.510184050 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.510200024 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.519473076 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.519532919 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.519572973 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.519646883 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.519664049 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.519671917 CEST	51140	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.519676924 CEST	443	51140	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.521590948 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.521612883 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.521732092 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.521867990 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.521877050 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.537935019 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.537987947 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.538100958 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.538124084 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.538130045 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.538142920 CEST	51137	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.538147926 CEST	443	51137	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.539793015 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.539834976 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.539968014 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.540088892 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.540103912 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.541520119 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.541593075 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.541637897 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.541735888 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.541748047 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.541758060 CEST	51136	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.541763067 CEST	443	51136	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.543380976 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.543405056 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.543559074 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.543677092 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.543683052 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.546471119 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.546519041 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.546608925 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.546633005 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.546636105 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.546644926 CEST	51139	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.546648026 CEST	443	51139	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.548158884 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.548167944 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:34.548228025 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.548365116 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:34.548369884 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.160099030 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.160810947 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.160872936 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.161376953 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.161391020 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.173242092 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.173687935 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.173727036 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.174597025 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.174602985 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.202663898 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.202671051 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.204210997 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.204219103 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.204802990 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.204940081 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.204946041 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.205193043 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.205199003 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.207345963 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.207350016 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.208120108 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.208141088 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.209142923 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.209151983 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.261745930 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.261892080 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.262046099 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.262164116 CEST	51142	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.262191057 CEST	443	51142	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.265324116 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.265366077 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.265430927 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.265652895 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.265671968 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.279270887 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.279350042 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.279403925 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.279625893 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.279644966 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.279655933 CEST	51143	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.279661894 CEST	443	51143	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.284056902 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.284174919 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.284264088 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.284596920 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.284661055 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310406923 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310477018 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310534000 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.310589075 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310736895 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310777903 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.310870886 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310884953 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.310900927 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.310911894 CEST	51146	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.310916901 CEST	443	51146	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.311073065 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.311135054 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.312114954 CEST	51144	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.312139988 CEST	443	51144	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.315329075 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.315337896 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.315346003 CEST	51145	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.315349102 CEST	443	51145	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.323676109 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.323714972 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.323843956 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.324758053 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.324767113 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.324909925 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.327223063 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.327243090 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.327550888 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.327562094 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.328068018 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.328155041 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.328228951 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.328430891 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.328475952 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.942955017 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.943559885 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.943589926 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.944013119 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.944040060 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.976715088 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.977214098 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.977277040 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.977727890 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.977741957 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.977914095 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.978194952 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.978216887 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.978615999 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.978621960 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.982626915 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.982949972 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.982956886 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.983326912 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.983333111 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.991908073 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.992274046 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.992362022 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:35.992630005 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:35.992645979 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421627045 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421642065 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421689987 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421710968 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421731949 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421763897 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.421772957 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.421792030 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.421806097 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422048092 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422054052 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422118902 CEST	51149	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422120094 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422122002 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422136068 CEST	443	51149	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422188997 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422280073 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422765017 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422765017 CEST	51151	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.422823906 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.422851086 CEST	443	51151	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.424452066 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.424478054 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.424513102 CEST	51147	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.424521923 CEST	443	51147	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.426086903 CEST	51148	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.426100016 CEST	443	51148	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.427232981 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.427252054 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.427265882 CEST	51150	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.427272081 CEST	443	51150	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.431714058 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.431766987 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.432223082 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.432631016 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.432652950 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.434309959 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.434345961 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.434417963 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.434578896 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.434591055 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.435755968 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.435762882 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.436045885 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.437459946 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.437498093 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.437578917 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439148903 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439223051 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.439296961 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439482927 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439493895 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.439680099 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439711094 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:36.439855099 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:36.439883947 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.107876062 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.108377934 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.108436108 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.108839989 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.108854055 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.113286018 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.113677979 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.113703012 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.114079952 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.114085913 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.122930050 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.123291016 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.123322964 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.123677015 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.123684883 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.143012047 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.143362045 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.143376112 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.143743992 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.143750906 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.209490061 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.209549904 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.209739923 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.209825993 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.209875107 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.209903955 CEST	51152	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.209919930 CEST	443	51152	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.212342978 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.212388992 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.212486982 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.212636948 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.212651014 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.214484930 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.214565992 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.214653969 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.214679003 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.214692116 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.214700937 CEST	51153	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.214705944 CEST	443	51153	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.216872931 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.216881990 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.216939926 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.217045069 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.217055082 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.225002050 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.225152969 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.225219965 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.225260973 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.225260973 CEST	51156	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.225281000 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.225297928 CEST	443	51156	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.227330923 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.227359056 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.227422953 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.227588892 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.227607012 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.234277010 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.234759092 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.234819889 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.235037088 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.235054016 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.248795986 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.248895884 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.248961926 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.249047041 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.249053955 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.249061108 CEST	51154	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.249064922 CEST	443	51154	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.251055002 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.251086950 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.251146078 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.251394987 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.251403093 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.341310978 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.341382980 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.341476917 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.341686010 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.341686964 CEST	51155	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.341734886 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.341766119 CEST	443	51155	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.345061064 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.345153093 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:37.345240116 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.345535040 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:37.345616102 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.040977001 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.041558027 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.041594028 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.042234898 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.042252064 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.044536114 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.044574976 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.044909000 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.044928074 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.045016050 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.045125961 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.045141935 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.045658112 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.045665979 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.045908928 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.045914888 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.046344995 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.046351910 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.046968937 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.046973944 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.143965960 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.144110918 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.144191027 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.144283056 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.144311905 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.144336939 CEST	51159	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.144346952 CEST	443	51159	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.146718979 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.146873951 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.147063971 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.147089958 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.147104025 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.147111893 CEST	51158	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.147116899 CEST	443	51158	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.147660971 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.147710085 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.147836924 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.148305893 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.148328066 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.149558067 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.149600983 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.149811029 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.149935961 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.149950981 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.152280092 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.152347088 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.152407885 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.152484894 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.152498960 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.152510881 CEST	51160	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.152517080 CEST	443	51160	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154445887 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154608011 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154669046 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.154865980 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.154900074 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154922962 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.154927015 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154944897 CEST	51157	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.154948950 CEST	443	51157	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.154963970 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.155169964 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.155181885 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.157305956 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.157391071 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.157464027 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.157602072 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.157638073 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.225493908 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.226027012 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.226064920 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.226653099 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.226661921 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.327797890 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.327851057 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.328092098 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.328180075 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.328200102 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.328221083 CEST	51161	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.328228951 CEST	443	51161	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.331784964 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.331825018 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.331892967 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.332068920 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.332082987 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.475716114 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:38.475804090 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:38.475886106 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:38.476144075 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:38.476181984 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:38.815449953 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.818120003 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.818167925 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.818644047 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.818650961 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.819714069 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.820236921 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.820254087 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.820892096 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.820898056 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.839101076 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.839493036 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.839569092 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.840023041 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.840037107 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.842010021 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.842317104 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.842327118 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.842843056 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.842849016 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.919807911 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.919872046 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.919940948 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.920255899 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.920255899 CEST	51162	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.920273066 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.920284986 CEST	443	51162	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.922977924 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.923122883 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.923187971 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923289061 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923306942 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.923319101 CEST	51163	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923341036 CEST	443	51163	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.923548937 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923578978 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.923685074 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923851967 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.923861980 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.926047087 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.926104069 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.926335096 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.926449060 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.926479101 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.948466063 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.948522091 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.948590994 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.948793888 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.948816061 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.948848963 CEST	51165	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.948860884 CEST	443	51165	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.951539040 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.951560974 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.951793909 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.951927900 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.951952934 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.952035904 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.952214003 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.952274084 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.952316046 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.952332973 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.952341080 CEST	51164	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.952347040 CEST	443	51164	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.954636097 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.954660892 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.954724073 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.954849005 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.954858065 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.994450092 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.994983912 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.995007038 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:38.995575905 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:38.995585918 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.098030090 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.098093987 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.098309994 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.098386049 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.098386049 CEST	51166	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.098429918 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.098458052 CEST	443	51166	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.101567030 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.101624012 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.101836920 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.102032900 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:39.102047920 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:39.136898994 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:39.141256094 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:39.141293049 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:39.141679049 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:39.142031908 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:39.142108917 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:39.192984104 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:40.526613951 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.531501055 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.531513929 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.534183025 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.534194946 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.534811974 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.534986973 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.536205053 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.536211014 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.537542105 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.537564039 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.538619995 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.538630009 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.539077044 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.539108992 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.540014029 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.540019989 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.540442944 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.540457964 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.541501045 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.541512012 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.541745901 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.541757107 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.542995930 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.542999983 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.634016037 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.634164095 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.634218931 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.634757996 CEST	51168	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.634768963 CEST	443	51168	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.637886047 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.637891054 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.637968063 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.638015032 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.638087034 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.638209105 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.638330936 CEST	51170	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.638354063 CEST	443	51170	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.639328957 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.639492989 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.639741898 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.640216112 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.640302896 CEST	51169	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.640315056 CEST	443	51169	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.640376091 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.640434027 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.640865088 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.640913963 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.641026974 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.642023087 CEST	51171	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.642030001 CEST	443	51171	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.644279957 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.644294024 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.644324064 CEST	51172	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.644331932 CEST	443	51172	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.647797108 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.647856951 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.654573917 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.654634953 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.654714108 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.655273914 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.655323982 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.655452967 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.655776024 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.655803919 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.658138990 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.658222914 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.658289909 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.658516884 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.658550978 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.659775019 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.659809113 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.661262989 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.661307096 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:40.661614895 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.674173117 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:40.674206972 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.307343006 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.308095932 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.308134079 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.308859110 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.308866978 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.310051918 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.311146975 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.311180115 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.312203884 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.312212944 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.322897911 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.323803902 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.323822975 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.325015068 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.325026989 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.339766979 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.340347052 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.340389967 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.341463089 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.341470003 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.402373075 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.403584957 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.403618097 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.405124903 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.405141115 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.408770084 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.408848047 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.408921003 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.409231901 CEST	51173	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.409274101 CEST	443	51173	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.413005114 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.413060904 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.413227081 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.414664984 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.414707899 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.414834976 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.415034056 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.415047884 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.415306091 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.415342093 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.415380001 CEST	51176	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.415401936 CEST	443	51176	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.419419050 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.419465065 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.419518948 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.420356035 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.420382977 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.426680088 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.426747084 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.427126884 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.427360058 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.427360058 CEST	51174	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.427381039 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.427417994 CEST	443	51174	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.431708097 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.431746006 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.431802988 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.432271004 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.432286024 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.445038080 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.445118904 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.445188046 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.445519924 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.445540905 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.445554018 CEST	51175	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.445566893 CEST	443	51175	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.451822996 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.451864004 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.451926947 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.452291012 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.452305079 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.507297039 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.507669926 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.507738113 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.509094954 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.509119987 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.509134054 CEST	51177	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.509140968 CEST	443	51177	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.513178110 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.513217926 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:41.513300896 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.513477087 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:41.513492107 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.068054914 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.069756031 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.069849014 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.071846008 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.071865082 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.085968018 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.086601973 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.086652040 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.087404013 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.087415934 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.091346979 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.092098951 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.092133999 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.092880964 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.092895031 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.106070995 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.106534958 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.106560946 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.107377052 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.107388020 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.167979956 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.169234037 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.169260979 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.169297934 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.169361115 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.169487953 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.170573950 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.170581102 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.171601057 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.171648979 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.171679974 CEST	51179	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.171695948 CEST	443	51179	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.178988934 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.179052114 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.179318905 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.179884911 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.179913998 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.188210011 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.188282013 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.188442945 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.197132111 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.197298050 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.198076010 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.205765963 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.205790997 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.205806017 CEST	51180	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.205815077 CEST	443	51180	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.207250118 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.207344055 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.207411051 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.209319115 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.209352016 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.209367037 CEST	51178	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.209373951 CEST	443	51178	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.212196112 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.212208033 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.212220907 CEST	51181	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.212224960 CEST	443	51181	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.214988947 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.215025902 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.215172052 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.216902018 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.216947079 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.217027903 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.217581034 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.217602015 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.218988895 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.219000101 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.219172955 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.219278097 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.219293118 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.219681025 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.219692945 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.268402100 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.268563986 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.268660069 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.269263029 CEST	51182	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.269282103 CEST	443	51182	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.272555113 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.272605896 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.272725105 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.273210049 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.273227930 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.824251890 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.824985981 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.825021029 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.825898886 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.825907946 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.873233080 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.874017954 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.874041080 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.875087976 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.875096083 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.895920992 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.925333023 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.925405979 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.925468922 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.934917927 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.934937954 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.935944080 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.935962915 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.936441898 CEST	51183	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.936451912 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.936475039 CEST	443	51183	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.937135935 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.937172890 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.937848091 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.937856913 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.942387104 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.942440987 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.942636967 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.942989111 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.943012953 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.975044012 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.975111961 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.975239992 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.975595951 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.975622892 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.975636005 CEST	51185	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.975644112 CEST	443	51185	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.980712891 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.980739117 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:42.980868101 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.980983973 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:42.980993986 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.037261009 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.037343025 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.037396908 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.037897110 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.037916899 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.037925959 CEST	51186	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.037930965 CEST	443	51186	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.039644957 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.039798975 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.039869070 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.040097952 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.040127993 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.040146112 CEST	51187	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.040153980 CEST	443	51187	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.043956995 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.043988943 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.044058084 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.044981003 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.044991016 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.046247005 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.046299934 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.046361923 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.046479940 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.046499014 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.606163025 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.614062071 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.614099979 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.615942955 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.615951061 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.692137003 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.692562103 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.692573071 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.693098068 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.693101883 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.703769922 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.704087973 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.704114914 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.704473019 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.704479933 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.719399929 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.719474077 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.719525099 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.719655037 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.719675064 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.719690084 CEST	51188	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.719696999 CEST	443	51188	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.722107887 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.722141981 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.722215891 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.722333908 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.722345114 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.805129051 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.805542946 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.805557966 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.805963993 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.805974007 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.811564922 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.811723948 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.811786890 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.811815023 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.811835051 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.811847925 CEST	51189	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.811853886 CEST	443	51189	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.814223051 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.814271927 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.814342022 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.814496994 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.814517021 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.816334009 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.816556931 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.816606998 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.816639900 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.816639900 CEST	51191	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.816657066 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.816667080 CEST	443	51191	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.818780899 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.818793058 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.818979025 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.819120884 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.819135904 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.922962904 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.923115969 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.923181057 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.923240900 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.923255920 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.923264980 CEST	51190	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.923269033 CEST	443	51190	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.925885916 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.925924063 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:43.926156044 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.926302910 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:43.926316977 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.228589058 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.229134083 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.229181051 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.229572058 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.229581118 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.335345984 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.335526943 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.335612059 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.335665941 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.335665941 CEST	51184	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.335695982 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.335711002 CEST	443	51184	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.338432074 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.338534117 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.338702917 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.338866949 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.338884115 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.374006987 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.374430895 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.374454975 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.374855995 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.374861002 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.475828886 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.475888968 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.476068020 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.476099014 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.476114035 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.476123095 CEST	51192	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.476129055 CEST	443	51192	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.478946924 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.479048014 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.479129076 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.479398966 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.479482889 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.488627911 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.489037991 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.489080906 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.489669085 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.489677906 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.505496025 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.505858898 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.505873919 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.506452084 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.506459951 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.586972952 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.587455034 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.587480068 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.588027954 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.588033915 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.590449095 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.590605974 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.590672016 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.590713024 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.590730906 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.590749979 CEST	51194	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.590758085 CEST	443	51194	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.593678951 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.593774080 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.593867064 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.594012976 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.594038010 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.616158009 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.616312981 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.616374016 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.616427898 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.616439104 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.616452932 CEST	51193	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.616458893 CEST	443	51193	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.618988991 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.619035006 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.619090080 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.619194031 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.619204044 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.687660933 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.687741995 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.687809944 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.688069105 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.688086987 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.688097000 CEST	51195	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.688102961 CEST	443	51195	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.691111088 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.691138983 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:44.691195965 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.691328049 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:44.691338062 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.001941919 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.002510071 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.002531052 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.003123045 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.003134012 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.106410027 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.106580973 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.106657028 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.106740952 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.106758118 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.106769085 CEST	51196	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.106775045 CEST	443	51196	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.109378099 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.109441996 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.109497070 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.109685898 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.109704971 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.132834911 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.133358002 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.133424997 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.133693933 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.133709908 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.235156059 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.235236883 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.235359907 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.235538006 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.235586882 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.235624075 CEST	51197	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.235640049 CEST	443	51197	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.238114119 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.238152027 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.238332987 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.238518000 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.238533974 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.260989904 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.261434078 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.261496067 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.261893988 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.261909962 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.313947916 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.314507008 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.314536095 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.314941883 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.314948082 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.356919050 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.357378960 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.357403994 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.357827902 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.357836008 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.362883091 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.363039017 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.363219976 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.363219976 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.363219976 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.365762949 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.365796089 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.365859032 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.365993023 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.366005898 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.417614937 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.417701960 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.417777061 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.417867899 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.417884111 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.417893887 CEST	51199	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.417898893 CEST	443	51199	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.420473099 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.420499086 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.420574903 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.420764923 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.420775890 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.461050034 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.461138964 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.461199999 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.461522102 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.461535931 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.461549044 CEST	51200	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.461555958 CEST	443	51200	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.464706898 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.464808941 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.465038061 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.465208054 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.465244055 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.677412987 CEST	51198	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.677483082 CEST	443	51198	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.807140112 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.807748079 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.807781935 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.808393955 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.808402061 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.911334991 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.911891937 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.911916018 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.912468910 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.912476063 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.914586067 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.914659977 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.914838076 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.914882898 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.914905071 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.914918900 CEST	51201	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.914927006 CEST	443	51201	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.917676926 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.917747021 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:45.917857885 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.918010950 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:45.918028116 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.013664007 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.013739109 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.013808012 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.017520905 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.017802954 CEST	51202	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.017822981 CEST	443	51202	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.019356012 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.019381046 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.019969940 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.019975901 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.022723913 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.022768021 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.022821903 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.022954941 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.022964001 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.077009916 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.077577114 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.077594042 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.078135014 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.078139067 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.112083912 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.112571955 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.112651110 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.113024950 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.113039970 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.118657112 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.118721962 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.118777990 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.118796110 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.118905067 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.118911982 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.118926048 CEST	51203	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.119004965 CEST	443	51203	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.121602058 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.121699095 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.121786118 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.121936083 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.121967077 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.180031061 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.180099964 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.180315971 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.180361986 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.180377007 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.180387020 CEST	51204	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.180392981 CEST	443	51204	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.182742119 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.182784081 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.182857990 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.183100939 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.183115959 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.212951899 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.213085890 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.213146925 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.213182926 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.213182926 CEST	51205	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.213202953 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.213213921 CEST	443	51205	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.215063095 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.215090036 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.215221882 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.215337038 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.215349913 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.583097935 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.583581924 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.583591938 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.584130049 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.584136009 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.684145927 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.684201002 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.684329033 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.684396029 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.684497118 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.684513092 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.684519053 CEST	51206	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.684525967 CEST	443	51206	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.687423944 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.687455893 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.687609911 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.687792063 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.687812090 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.710151911 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.711484909 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.711508036 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.715675116 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.715684891 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.771348953 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.771826982 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.771857023 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.772283077 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.772289991 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.819675922 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.819690943 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.819745064 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.819750071 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.819941998 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.819992065 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.820008993 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.820019960 CEST	51207	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.820024014 CEST	443	51207	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.822581053 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.822674990 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.822760105 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.822935104 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.822974920 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.850068092 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.850436926 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.850449085 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.850842953 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.850847960 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.869854927 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.870160103 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.870171070 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.870526075 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.870532036 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.872731924 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.872788906 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.872857094 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.872920036 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.872960091 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.873023033 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.873070955 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.873070955 CEST	51208	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.873105049 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.873131037 CEST	443	51208	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.875410080 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.875437975 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.875557899 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.875653982 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.875663996 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.954343081 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.954401016 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.954485893 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.954627991 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.954655886 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.954673052 CEST	51209	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.954680920 CEST	443	51209	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.957246065 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.957268000 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.957366943 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.957539082 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.957549095 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.971846104 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.972017050 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.972080946 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.972209930 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.972209930 CEST	51210	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.972220898 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.972230911 CEST	443	51210	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.974426031 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.974462986 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:46.974551916 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.974678040 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:46.974714994 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.349219084 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.353230000 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.353293896 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.354449987 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.354465961 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.451749086 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.451927900 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.452002048 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.452461004 CEST	51211	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.452505112 CEST	443	51211	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.458192110 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.458271027 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.458375931 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.458684921 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.458719969 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.496809959 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.498089075 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.498117924 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.498878956 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.498883963 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.539199114 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.539757967 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.539774895 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.540486097 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.540492058 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.597690105 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.597811937 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.597857952 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.598088026 CEST	51212	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.598104000 CEST	443	51212	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.602036953 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.602087021 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.602258921 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.602504015 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.602519035 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.611754894 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.612348080 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.612356901 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.613557100 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.613560915 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.639884949 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.640032053 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.640086889 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.640448093 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.640459061 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.640469074 CEST	51213	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.640474081 CEST	443	51213	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.645402908 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.645432949 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.645497084 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.645857096 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.645869970 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.650144100 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.650957108 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.650980949 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.652045012 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.652049065 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.714628935 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.714695930 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.714751959 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.736938953 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.736964941 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.736974955 CEST	51214	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.736979961 CEST	443	51214	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.741480112 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.741585016 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.741647959 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.741837978 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.741858006 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.756391048 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.756452084 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.756588936 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.756704092 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.756722927 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.756736994 CEST	51215	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.756742001 CEST	443	51215	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.759746075 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.759778976 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:47.759919882 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.760154009 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:47.760169983 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.105453014 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.106601954 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.106612921 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.108313084 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.108318090 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.206387997 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.206547022 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.206626892 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.206775904 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.206815958 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.206841946 CEST	51216	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.206856966 CEST	443	51216	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.209837914 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.209887028 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.209956884 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.210117102 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.210133076 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.254856110 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.255410910 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.255445004 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.256002903 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.256009102 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.342256069 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.342848063 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.342878103 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.343481064 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.343486071 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.355598927 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.355670929 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.355856895 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.355899096 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.355916977 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.355927944 CEST	51217	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.355933905 CEST	443	51217	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.359076023 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.359126091 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.359195948 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.359488010 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.359503984 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.403798103 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.404635906 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.404660940 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.405436039 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.405441999 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.438070059 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.438522100 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.438546896 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.438958883 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.438965082 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.448162079 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.448452950 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.448523998 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.448724031 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.448748112 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.448760986 CEST	51218	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.448767900 CEST	443	51218	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.451054096 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.451095104 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.451255083 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.451415062 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.451427937 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.506150007 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.506297112 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.506340981 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.506354094 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.506510973 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.506596088 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.506622076 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.506639004 CEST	51219	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.506645918 CEST	443	51219	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.509322882 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.509352922 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.509542942 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.509705067 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.509712934 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.543320894 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.543467045 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.543649912 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.543694973 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.543715000 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.543729067 CEST	51220	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.543735981 CEST	443	51220	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.546534061 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.546576977 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.546658039 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.546778917 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.546797037 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.903068066 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.903568983 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.903598070 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:48.904680014 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:48.904685974 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.008454084 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.009069920 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.009088039 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.009958029 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.010013103 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.010118008 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.010179996 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.010543108 CEST	51221	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.010554075 CEST	443	51221	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.010818005 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.010823965 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.015253067 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.015319109 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.015476942 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.015662909 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.015690088 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.041475058 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:49.041613102 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:49.041759968 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:49.110033989 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.110589027 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.110662937 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.111869097 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.126846075 CEST	51222	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.126859903 CEST	443	51222	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.138581038 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.138598919 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.141199112 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.141206980 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.144366026 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.144397974 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.144510031 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.144756079 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.144762039 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.165884972 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.166372061 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.166385889 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.167073965 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.167078972 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.204754114 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.205643892 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.205702066 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.206517935 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.206533909 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.240083933 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.240262032 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.240350962 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.240883112 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.240904093 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.240915060 CEST	51223	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.240921021 CEST	443	51223	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.249927044 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.249972105 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.250085115 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.250349998 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.250365019 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.267602921 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.267659903 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.267724991 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.267997980 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.267998934 CEST	51224	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.268018961 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.268030882 CEST	443	51224	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.273276091 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.273370981 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.273467064 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.273864985 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.273901939 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.306878090 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.306909084 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.306972027 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.306996107 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.307058096 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.307195902 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.307260036 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.307306051 CEST	51225	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.307326078 CEST	443	51225	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.311954975 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.312036037 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.312138081 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.312509060 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.312544107 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.698391914 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.699920893 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.699960947 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.701603889 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.701617956 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.802968025 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.803114891 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.803314924 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.803639889 CEST	51226	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.803682089 CEST	443	51226	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.807106972 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.807146072 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.807290077 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.807410002 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.807421923 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.827321053 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.827822924 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.827831984 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.828284025 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.828289032 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.906368017 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.906868935 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.906888008 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.907306910 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.907314062 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.922817945 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.923237085 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.923297882 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.923614025 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.923629045 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.932158947 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.932233095 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.932352066 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.932393074 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.932405949 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.932416916 CEST	51227	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.932424068 CEST	443	51227	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.935379028 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.935424089 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:49.935519934 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.935689926 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:49.935704947 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.004435062 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.004868984 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.004904985 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.005274057 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.005279064 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.011946917 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.012002945 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.012082100 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.012286901 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.012286901 CEST	51228	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.012305975 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.012316942 CEST	443	51228	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.015052080 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.015084028 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.015440941 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.015628099 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.015645027 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.025597095 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.025619030 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.025652885 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.025670052 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.025717974 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.025898933 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.025909901 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.025919914 CEST	51229	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.025923967 CEST	443	51229	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.028244972 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.028256893 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.028322935 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.028503895 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.028516054 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.140763044 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.140840054 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.140903950 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.141239882 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.141258001 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.141273975 CEST	51230	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.141278982 CEST	443	51230	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.144742966 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.144795895 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.145603895 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.145603895 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.145649910 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.505819082 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.507410049 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.507437944 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.508002996 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.508019924 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.586236954 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.587136030 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.587158918 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.588303089 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.588316917 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.613715887 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.613771915 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.613877058 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.613943100 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.613943100 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.614258051 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.614279985 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.614820004 CEST	51231	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.614829063 CEST	443	51231	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.619146109 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.619184017 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.619256973 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.619594097 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.619607925 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.677407980 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.677946091 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.677973032 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.678591967 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.678597927 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.687066078 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.687138081 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.687228918 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.687642097 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.687665939 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.687835932 CEST	51232	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.687844038 CEST	443	51232	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.691843033 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.691890955 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.691997051 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.692173004 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.692190886 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.706449986 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.706898928 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.706921101 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.707597971 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.707602978 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.742547035 CEST	51167	443	192.168.2.4	172.217.18.4
Oct 13, 2024 17:49:50.742563963 CEST	443	51167	172.217.18.4	192.168.2.4
Oct 13, 2024 17:49:50.799501896 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.800590992 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.800611973 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.801557064 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.801564932 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.802340031 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.802400112 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.802561045 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.802700996 CEST	51233	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.802715063 CEST	443	51233	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.807462931 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.807507992 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.807599068 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.807859898 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.807876110 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.811415911 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.811503887 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.811548948 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.811830997 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.811835051 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.811846018 CEST	51234	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.811851025 CEST	443	51234	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.814969063 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.815009117 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.815062046 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.815279961 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.815294981 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.900888920 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.900927067 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.900969982 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.901113033 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.902215004 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.902215004 CEST	51235	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.902230024 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.902240992 CEST	443	51235	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.905232906 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.905262947 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:50.905361891 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.905591965 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:50.905603886 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.321187973 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.321791887 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.321805000 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.322169065 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.322174072 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.346467972 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.346947908 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.346982002 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.347368002 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.347410917 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.424993992 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.425334930 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.425426960 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.425426960 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.425530910 CEST	51236	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.425553083 CEST	443	51236	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.428838015 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.428885937 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.429044962 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.429243088 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.429256916 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.448194981 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.448268890 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.448344946 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.448452950 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.448477030 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.448492050 CEST	51237	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.448498964 CEST	443	51237	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.451194048 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.451232910 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.451466084 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.451606035 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.451615095 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.503192902 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.503732920 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.503750086 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.504189014 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.504195929 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.509632111 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.510059118 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.510087013 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.510579109 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.510586023 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.567631006 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.568249941 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.568284035 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.568718910 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.568726063 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.605899096 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.606098890 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.606142044 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.606159925 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.606178045 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.606230974 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.606266975 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.606285095 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.606297016 CEST	51239	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.606302977 CEST	443	51239	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.608974934 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.609026909 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.609100103 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.609296083 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.609316111 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.616835117 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.616956949 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.617006063 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.617064953 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.617084026 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.617098093 CEST	51238	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.617104053 CEST	443	51238	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.619451046 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.619530916 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.619616032 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.619764090 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.619796038 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.670824051 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.670880079 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.671031952 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.671081066 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.671081066 CEST	51240	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.671107054 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.671120882 CEST	443	51240	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.673544884 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.673592091 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:51.673650026 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.673799038 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:51.673815966 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.120206118 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.120702982 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.120726109 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.121233940 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.121238947 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.132883072 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.133227110 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.133233070 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.133740902 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.133744955 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.223355055 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.223546028 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.223602057 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.223741055 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.223757029 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.223766088 CEST	51242	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.223771095 CEST	443	51242	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.226699114 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.226743937 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.226814032 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.226979017 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.226994991 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.237477064 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.238845110 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.238898039 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.238998890 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.239002943 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.239018917 CEST	51241	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.239022970 CEST	443	51241	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.241322994 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.241417885 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.241487026 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.241640091 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.241661072 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.259183884 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.259553909 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.259573936 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.260009050 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.260015011 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.314807892 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.315325975 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.315417051 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.315726042 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.315742016 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.327606916 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.328027964 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.328056097 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.328414917 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.328421116 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.363946915 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.364005089 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.364052057 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.364223957 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.364245892 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.364258051 CEST	51245	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.364265919 CEST	443	51245	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.366965055 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.367012978 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.367075920 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.367199898 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.367213964 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.415951967 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.416017056 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.416063070 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.416268110 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.416286945 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.416316032 CEST	51244	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.416321993 CEST	443	51244	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.419444084 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.419486046 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.419540882 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.419744015 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.419754982 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.436393976 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.436438084 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.436480045 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.436487913 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.436518908 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.436726093 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.436745882 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.436759949 CEST	51243	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.436767101 CEST	443	51243	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.439074993 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.439089060 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.439142942 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.439301014 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.439310074 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.882982969 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.883857012 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.883889914 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.884080887 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.884087086 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.923109055 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.924213886 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.924213886 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.924274921 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.924288988 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.983901978 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.984054089 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.984322071 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.984322071 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.985161066 CEST	51246	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.985177040 CEST	443	51246	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.987406015 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.987458944 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:52.987806082 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.987806082 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:52.987845898 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.016737938 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.017709017 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.017709017 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.017733097 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.017750978 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.027441978 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.027487040 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.027645111 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.027724981 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.027826071 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.027826071 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.027916908 CEST	51247	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.027937889 CEST	443	51247	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.030688047 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.030733109 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.031074047 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.031074047 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.031104088 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.080912113 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.081464052 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.081494093 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.082025051 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.082031965 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.118648052 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.118741035 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.118999004 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.118999958 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.119209051 CEST	51248	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.119232893 CEST	443	51248	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.121860981 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.121898890 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.122051954 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.122308969 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.122320890 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.129410982 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.130258083 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.130285025 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.130492926 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.130501986 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.185307026 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.185380936 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.185524940 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.185617924 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.185631990 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.185631990 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.185837984 CEST	51249	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.185853958 CEST	443	51249	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.188086033 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.188124895 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.188406944 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.188406944 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.188443899 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.236450911 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.236516953 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.236772060 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.236772060 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.238214016 CEST	51250	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.238229990 CEST	443	51250	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.239500999 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.239553928 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.240453005 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.240453005 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.240488052 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.656107903 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.657232046 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.657233000 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.657257080 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.657273054 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.687410116 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.687834024 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.687856913 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.688313961 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.688321114 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.758774996 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.758986950 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.759047031 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.759051085 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.759094000 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.759155035 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.759171963 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.759185076 CEST	51251	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.759191036 CEST	443	51251	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.761976957 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.762017012 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.762247086 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.762351036 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.762365103 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.798523903 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.798692942 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.798854113 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.798855066 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.798855066 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.801490068 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.801542997 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.801641941 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.801810026 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.801831007 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.815340042 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.815740108 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.815752983 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.816150904 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.816158056 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.890871048 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.891360044 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.891372919 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.891827106 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.891830921 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.899382114 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.899812937 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.899873972 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.900228977 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.900249004 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.924179077 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.924429893 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.924477100 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.924482107 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.924521923 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.924575090 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.924593925 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.924602032 CEST	51253	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.924607992 CEST	443	51253	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.927434921 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.927481890 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.927539110 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.927757025 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.927774906 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.997805119 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.997893095 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.997951031 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.998106956 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.998121977 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:53.998131037 CEST	51254	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:53.998136044 CEST	443	51254	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.000870943 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.000919104 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.001029015 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.001199007 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.001216888 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.003009081 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.003057003 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.003110886 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.003165960 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.003282070 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.003299952 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.003310919 CEST	51255	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.003315926 CEST	443	51255	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.005642891 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.005678892 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.005733013 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.005891085 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.005904913 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.099143028 CEST	51252	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.099176884 CEST	443	51252	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.426999092 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.427560091 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.427592993 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.428024054 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.428035021 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.502470016 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.502954960 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.502965927 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.503412962 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.503417015 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.531307936 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.531560898 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.531625986 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.531666994 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.531666994 CEST	51256	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.531687021 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.531698942 CEST	443	51256	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.534467936 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.534506083 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.534614086 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.534889936 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.534909010 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.600101948 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.600723982 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.600758076 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.601345062 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.601351023 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.608000994 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.608380079 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.608428001 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.608478069 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.608491898 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.608503103 CEST	51257	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.608509064 CEST	443	51257	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.611453056 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.611510038 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.611706018 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.611907959 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.611922979 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.661940098 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.662473917 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.662494898 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.662914038 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.662920952 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.703216076 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.703701973 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.703845978 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.703845978 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.703845978 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.706460953 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.706513882 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.706624031 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.706897974 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.706912994 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.710622072 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.711127043 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.711142063 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.711540937 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.711545944 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.767467976 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.767538071 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.767647982 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.767663002 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.767699003 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.767735958 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.767756939 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.767769098 CEST	51259	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.767776012 CEST	443	51259	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.770149946 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.770172119 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.770267963 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.770437002 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.770452023 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.816813946 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.817105055 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.817163944 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.817239046 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.817239046 CEST	51260	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.817250013 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.817256927 CEST	443	51260	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.819437027 CEST	51265	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.819489956 CEST	443	51265	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:54.819643021 CEST	51265	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.819768906 CEST	51265	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:54.819802046 CEST	443	51265	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.005593061 CEST	51258	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.005636930 CEST	443	51258	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.202389956 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.202913046 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.202944994 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.203543901 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.203552008 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.262680054 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.263274908 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.263304949 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.263998985 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.264008999 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.308731079 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.308796883 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.308903933 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.309003115 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.309052944 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.309052944 CEST	51261	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.309077024 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.309089899 CEST	443	51261	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.311580896 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.311623096 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.311687946 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.311822891 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.311839104 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.365689993 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.365848064 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.366063118 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.366152048 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.366173983 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.366205931 CEST	51262	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.366214037 CEST	443	51262	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.368602037 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.368654013 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.369163990 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.369357109 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.369374990 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.372296095 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.372680902 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.372706890 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.373102903 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.373110056 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.426242113 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.433916092 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.433934927 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.434536934 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.434542894 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.475790977 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.475848913 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.475945950 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.482568979 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.482592106 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.482604980 CEST	51263	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.482610941 CEST	443	51263	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.485424042 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.485451937 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.485651016 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.485651016 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.485673904 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.531270027 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.531332970 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.531372070 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.531585932 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.531600952 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.531615973 CEST	51264	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.531622887 CEST	443	51264	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.543133974 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.543184996 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:55.543247938 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.543437004 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:55.543452024 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.208735943 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.209391117 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.209423065 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.209768057 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.209865093 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.209872961 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.210196018 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.210228920 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.210685015 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.210691929 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.211925983 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.212244987 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.212265968 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.212613106 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.212619066 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.309410095 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.309573889 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.309611082 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.309665918 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.309822083 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.309834957 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.309843063 CEST	51267	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.309848070 CEST	443	51267	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.310897112 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.311045885 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.311089993 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.311186075 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.311199903 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.311211109 CEST	51268	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.311217070 CEST	443	51268	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.312591076 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.312628984 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.312726974 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.312866926 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.312884092 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.312997103 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.313019991 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.313072920 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.313175917 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.313189030 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.321919918 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.321985006 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.322160006 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.322227001 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.322227001 CEST	51266	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.322259903 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.322287083 CEST	443	51266	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.324539900 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.324573994 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.324754000 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.324918985 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.324934959 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.391941071 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.392353058 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.392365932 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.392741919 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.392746925 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.493029118 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.493079901 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.493168116 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.493356943 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.493382931 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.493396997 CEST	51269	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.493403912 CEST	443	51269	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.496474981 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.496517897 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.496732950 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.496859074 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.496874094 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.960249901 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.961081982 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.961081982 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.961108923 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.961127996 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.967715979 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.968178034 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.968208075 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.968822002 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.968827963 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.972843885 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.973283052 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.973301888 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:56.973823071 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:56.973828077 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.065937996 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.066740990 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.067342997 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.067409992 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.067409992 CEST	51271	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.067428112 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.067436934 CEST	443	51271	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.070275068 CEST	51274	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.070311069 CEST	443	51274	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.070430040 CEST	51274	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.070789099 CEST	51274	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.070801020 CEST	443	51274	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.071274996 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.071486950 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.071567059 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.071567059 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.072053909 CEST	51270	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.072068930 CEST	443	51270	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.073610067 CEST	51275	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.073631048 CEST	443	51275	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.073817015 CEST	51275	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.073817015 CEST	51275	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.073843956 CEST	443	51275	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.073879957 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.073946953 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.074060917 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.074060917 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.074285030 CEST	51272	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.074292898 CEST	443	51272	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.075805902 CEST	51276	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.075876951 CEST	443	51276	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.076033115 CEST	51276	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.076034069 CEST	51276	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.076117992 CEST	443	51276	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.146763086 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.147633076 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.147633076 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.147644997 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.147660971 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.248044014 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.248306036 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.248505116 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.248505116 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.248933077 CEST	51273	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.248949051 CEST	443	51273	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.251075029 CEST	51277	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.251105070 CEST	443	51277	13.107.246.45	192.168.2.4
Oct 13, 2024 17:49:57.251209021 CEST	51277	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.251329899 CEST	51277	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:49:57.251343012 CEST	443	51277	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 17:48:35.775490999 CEST	53	61622	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:36.503262997 CEST	53906	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:36.503262997 CEST	62721	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:36.725799084 CEST	53	62721	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:36.729028940 CEST	53	53906	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:38.084837914 CEST	53	62431	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:38.214504957 CEST	50143	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:38.214737892 CEST	59767	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:38.414634943 CEST	64829	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:38.414902925 CEST	54617	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:48:38.421567917 CEST	53	64829	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:38.421880007 CEST	53	54617	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:38.430907965 CEST	53	50143	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:38.433511019 CEST	53	59767	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:39.320394039 CEST	53	51348	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:39.329561949 CEST	53	50257	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.200608969 CEST	53	64646	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:52.687921047 CEST	53	64025	1.1.1.1	192.168.2.4
Oct 13, 2024 17:48:55.025131941 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 17:49:11.847867966 CEST	53	50497	1.1.1.1	192.168.2.4
Oct 13, 2024 17:49:34.091572046 CEST	53	62744	1.1.1.1	192.168.2.4
Oct 13, 2024 17:49:34.174469948 CEST	53	57327	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 17:48:36.503262997 CEST	192.168.2.4	1.1.1.1	0x8275	Standard query (0)	support-ld-maps.info	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:36.503262997 CEST	192.168.2.4	1.1.1.1	0x87a7	Standard query (0)	support-ld-maps.info	65	IN (0x0001)	false
Oct 13, 2024 17:48:38.214504957 CEST	192.168.2.4	1.1.1.1	0xb595	Standard query (0)	support-ld-maps.info	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:38.214737892 CEST	192.168.2.4	1.1.1.1	0xdf57	Standard query (0)	support-ld-maps.info	65	IN (0x0001)	false
Oct 13, 2024 17:48:38.414634943 CEST	192.168.2.4	1.1.1.1	0x2bc2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:38.414902925 CEST	192.168.2.4	1.1.1.1	0x201a	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 17:48:36.729028940 CEST	1.1.1.1	192.168.2.4	0x8275	No error (0)	support-ld-maps.info		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:38.421567917 CEST	1.1.1.1	192.168.2.4	0x2bc2	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:38.421880007 CEST	1.1.1.1	192.168.2.4	0x201a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 17:48:38.430907965 CEST	1.1.1.1	192.168.2.4	0xb595	No error (0)	support-ld-maps.info		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:48:50.161144972 CEST	1.1.1.1	192.168.2.4	0x3fdf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:48:50.161144972 CEST	1.1.1.1	192.168.2.4	0x3fdf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:49:30.883434057 CEST	1.1.1.1	192.168.2.4	0xea26	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:49:30.883434057 CEST	1.1.1.1	192.168.2.4	0xea26	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:49:47.297496080 CEST	1.1.1.1	192.168.2.4	0x37b7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:49:47.297496080 CEST	1.1.1.1	192.168.2.4	0x37b7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

support-ld-maps.info

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:37 UTC	694	OUT	GET /icloud-archivos/code2022esp.php HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:37 UTC	229	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Accept-Ranges: none Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-13 15:48:37 UTC	7963	IN	Data Raw: 32 35 36 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 21 2d 2d 20 73 61 76 65 64 20 66 72 6f 6d 20 75 72 6c 3d 28 30 30 35 30 29 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 63 6c 6f 75 64 2e 63 6f 6d 2d 6e 73 2e 75 73 2f 61 55 33 56 31 2f 6d 6f 62 69 6c 65 2f 63 6f 64 65 2e 70 68 70 20 2d 2d 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 Data Ascii: 256e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">... saved from url=(0050)https://www.icloud.com-ns.us/aU3V1/mobile/code.php --><html><head><meta http-equiv="Content-Type" content="text/html; c
2024-10-13 15:48:37 UTC	1625	IN	Data Raw: 3d 3d 38 29 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 68 61 72 31 22 29 2e 66 6f 63 75 73 28 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 72 63 68 61 72 32 28 65 29 20 7b 20 0a 20 20 20 20 74 65 63 6c 61 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 29 20 3f 20 65 2e 6b 65 79 43 6f 64 65 20 3a 20 65 2e 77 68 69 63 68 3b 20 0a 20 20 20 20 69 66 20 28 74 65 63 6c 61 3d 3d 38 29 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 68 61 72 32 22 29 2e 66 6f 63 75 73 28 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 72 63 68 61 72 33 28 65 29 20 7b 20 0a 20 20 20 20 74 65 63 6c 61 20 3d 20 28 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 29 20 3f 20 65 2e 6b 65 79 43 6f 64 Data Ascii: ==8) document.getElementById("char1").focus();}function validarchar2(e) { tecla = (document.all) ? e.keyCode : e.which; if (tecla==8) document.getElementById("char2").focus();}function validarchar3(e) { tecla = (document.all) ? e.keyCod
2024-10-13 15:48:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-13 15:48:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:37 UTC	595	OUT	GET /icloud-archivos/fonts.css HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:37 UTC	253	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Length: 4391 Content-Type: text/css
2024-10-13 15:48:37 UTC	4391	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 79 72 69 61 64 20 53 65 74 20 50 72 6f 27 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 3b 0a 09 73 72 63 3a 6c 6f 63 61 6c 28 27 e2 98 ba ef b8 8e 27 29 2c 20 75 72 6c 28 22 2e 2f 6d 79 72 69 61 64 2d 73 65 74 2d 70 72 6f 5f 74 68 69 6e 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 2e 2f 6d 79 72 69 61 64 2d 73 65 74 2d 70 72 6f 5f 74 68 69 6e 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 09 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 39 39 32 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 Data Ascii: @font-face {font-family:'Myriad Set Pro';font-style:normal;font-weight:200;src:local(''), url("./myriad-set-pro_thin.woff") format("woff"), url("./myriad-set-pro_thin.ttf") format("truetype");/* Copyright (c) 1992 Adobe Systems Incorporate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:37 UTC	593	OUT	GET /icloud-archivos/app.css HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	254	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Length: 82736 Content-Type: text/css
2024-10-13 15:48:38 UTC	7938	IN	Data Raw: 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 0a 61 73 69 64 65 2c 0a 64 65 74 61 69 6c 73 2c 0a 66 69 67 63 61 70 74 69 6f 6e 2c 0a 66 69 67 75 72 65 2c 0a 66 6f 6f 74 65 72 2c 0a 68 65 61 64 65 72 2c 0a 68 67 72 6f 75 70 2c 0a 6d 61 69 6e 2c 0a 6d 65 6e 75 2c 0a 6e 61 76 2c 0a 73 65 63 74 69 6f 6e 2c 0a 73 75 6d 6d 61 72 79 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 61 75 64 69 6f 2c 0a 63 61 6e Data Ascii: html {font-family: sans-serif;-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;}body {margin: 0;}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary {display: block;}audio,can
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 31 30 20 7b 0a 09 09 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 31 31 20 7b 0a 09 09 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 37 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 20 7b 0a 09 09 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 20 7b 0a 09 09 72 69 67 68 74 3a 20 38 2e 33 33 33 33 33 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 20 7b 0a 09 09 72 69 67 68 74 3a 20 31 36 2e 36 36 36 36 37 25 3b 0a 09 7d 0a 09 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 33 20 7b 0a 09 09 72 69 67 68 74 3a Data Ascii: %;}.col-sm-10 {width: 83.33333%;}.col-sm-11 {width: 91.66667%;}.col-sm-12 {width: 100%;}.col-sm-pull-0 {right: auto;}.col-sm-pull-1 {right: 8.33333%;}.col-sm-pull-2 {right: 16.66667%;}.col-sm-pull-3 {right:
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 33 33 33 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 34 64 34 64 34 3b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 63 38 63 38 63 3b 0a 7d 0a 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 61 63 74 69 76 65 2c 0a 2e 6f 70 65 6e 3e 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 2c 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 64 65 Data Ascii: 333;background-color: #d4d4d4;border-color: #8c8c8c;}.btn-default:active,.btn-default.active,.open>.btn-default.dropdown-toggle {background-image: none;}.btn-default.disabled,.btn-default.disabled:hover,.btn-default.disabled:focus,.btn-de
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 3b 0a 7d 0a 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 2e 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 5b 64 69 73 61 62 6c 65 64 5d 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 64 61 6e 67 65 72 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d Data Ascii: ;}.btn-danger.disabled,.btn-danger.disabled:hover,.btn-danger.disabled:focus,.btn-danger.disabled.focus,.btn-danger.disabled:active,.btn-danger.disabled.active,.btn-danger[disabled],.btn-danger[disabled]:hover,.btn-danger[disabled]:focus,.btn-
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 3a 20 22 5c 66 31 31 36 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 61 64 69 6f 5f 66 69 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 37 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 61 64 69 6f 5f 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 38 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 61 64 69 6f 5f 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 39 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 65 6c 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 61 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 31 62 22 3b 0a 7d 0a 0a 2e 69 63 6f 6e 5f 72 65 6d 6f 76 65 Data Ascii: : "\f116";}.icon_radio_fill:before {content: "\f117";}.icon_radio_off:before {content: "\f118";}.icon_radio_on:before {content: "\f119";}.icon_reload:before {content: "\f11a";}.icon_remove:before {content: "\f11b";}.icon_remove
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 70 3a 20 39 35 25 3b 0a 09 7d 0a 09 32 35 25 20 7b 0a 09 09 74 6f 70 3a 20 36 35 25 3b 0a 09 7d 0a 09 37 35 25 20 7b 0a 09 09 74 6f 70 3a 20 33 30 25 3b 0a 09 7d 0a 09 31 30 30 25 20 7b 0a 09 09 74 6f 70 3a 20 30 3b 0a 09 7d 0a 7d 0a 0a 40 2d 6b 68 74 6d 6c 2d 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 75 70 20 7b 0a 09 30 25 20 7b 0a 09 09 74 6f 70 3a 20 39 35 25 3b 0a 09 7d 0a 09 32 35 25 20 7b 0a 09 09 74 6f 70 3a 20 36 35 25 3b 0a 09 7d 0a 09 37 35 25 20 7b 0a 09 09 74 6f 70 3a 20 33 30 25 3b 0a 09 7d 0a 09 31 30 30 25 20 7b 0a 09 09 74 6f 70 3a 20 30 3b 0a 09 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 75 70 20 7b 0a 09 30 25 20 7b 0a 09 09 74 6f 70 3a 20 39 35 25 3b 0a 09 7d 0a 09 32 35 25 20 7b 0a 09 09 74 6f 70 3a 20 36 35 25 Data Ascii: p: 95%;}25% {top: 65%;}75% {top: 30%;}100% {top: 0;}}@-khtml-keyframes slideup {0% {top: 95%;}25% {top: 65%;}75% {top: 30%;}100% {top: 0;}}@keyframes slideup {0% {top: 95%;}25% {top: 65%
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 2d 6c 69 6e 6b 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 2e 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2e 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 2d 73 74 65 70 2c 0a 2e 77 Data Ascii: : 400;}.widget-container .si-link {font-size: 14px;cursor: pointer;text-decoration: none;margin: 20px 0px;display: inline;font-weight: 400;}.widget-container .si-link:hover {text-decoration: underline;}.widget-container .si-step,.w
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 69 7a 65 3a 20 31 38 70 78 3b 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 68 74 6d 6c 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2e 61 75 74 68 20 7b 0a 09 6c 65 66 74 3a 20 32 33 70 78 3b 0a 09 74 6f 70 3a 20 36 32 70 78 3b 0a 7d 0a 0a 2e 64 65 76 69 63 65 73 20 2e 73 69 2d 64 65 76 69 63 65 2d 72 6f 77 20 7b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 35 44 35 44 35 3b 0a 7d 0a 0a 2e 64 65 76 69 63 65 73 20 2e 73 69 2d 64 65 76 69 63 65 2d 72 6f 77 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 70 78 3b 0a 7d 0a 0a 2e 64 65 76 69 63 65 73 20 Data Ascii: ize: 18px;line-height: 20px;}}html[dir="rtl"] .widget-container .spinner-container.auth {left: 23px;top: 62px;}.devices .si-device-row {border-top: 1px solid #D5D5D5;}.devices .si-device-row:first-child {border-top: 0px;}.devices
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 3a 20 31 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 7d 0a 0a 2e 76 65 72 69 66 79 2d 63 6f 64 65 20 2e 70 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 6e 66 6f 20 2e 67 6f 2d 74 6f 2d 61 69 64 2d 69 6e 66 6f 20 2e 66 61 74 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 7d 0a 0a 2e 76 65 72 69 66 79 2d 63 6f 64 65 20 2e 70 6f 70 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 6e 66 6f 20 2e 67 6f 2d 74 6f 2d 61 69 64 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 20 7b 0a 09 6c 65 66 74 3a 20 36 36 2e 32 25 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 Data Ascii: : 10px;border: 1px solid rgba(0, 0, 0, 0.2);}.verify-code .pop-container.info .go-to-aid-info .fat {font-weight: 600;}.verify-code .pop-container.info .go-to-aid-info:before {left: 66.2%;background-color: #fff;border-left: 1px solid rgba(0
2024-10-13 15:48:38 UTC	8000	IN	Data Raw: 70 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6e 64 69 6e 67 2d 63 6f 64 65 20 7b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 73 75 70 65 72 3b 0a 7d 0a 0a 2e 76 65 72 69 66 79 2d 70 68 6f 6e 65 20 2e 68 73 61 32 2d 6e 6f 2d 63 6f 64 65 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 35 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 09 62 6f 74 74 6f 6d 3a 20 31 38 70 78 3b 0a 7d 0a 0a 2e 76 65 72 69 66 79 2d 70 68 6f 6e 65 20 2e 68 73 61 32 2d 6e 6f 2d 63 6f 64 65 20 2e 6c 69 6e 6b 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 38 38 43 43 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 76 Data Ascii: pinner-container.sending-code {vertical-align: super;}.verify-phone .hsa2-no-code {max-width: 505px;width: 100%;margin: auto;bottom: 18px;}.verify-phone .hsa2-no-code .link {color: #0088CC;font-size: 16px;text-decoration: none;}.v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:37 UTC	595	OUT	GET /icloud-archivos/style.css HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	252	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:37 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Length: 404 Content-Type: text/css
2024-10-13 15:48:38 UTC	404	IN	Data Raw: 2e 65 72 72 6f 72 6c 6f 67 69 6e 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 41 45 39 41 33 3b 0a 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 77 69 64 74 68 3a 37 30 25 3b 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 33 37 25 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 6c 65 66 74 3a 20 35 32 25 3b 0a 70 61 64 64 69 6e 67 3a 20 31 65 6d 3b 0a 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 31 38 35 2c 31 34 39 2c 31 2c 30 2e 34 37 29 3b 0a 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 35 70 78 20 31 30 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 39 70 78 3b 0a 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 63 Data Ascii: .errorlogin {background-color: #FAE9A3;position: absolute;width:70%;margin-left: -37%;border-radius: 5px;left: 52%;padding: 1em;border: 1px solid rgba(185,149,1,0.47);box-shadow: 0px 5px 10px 2px rgba(0,0,0,0.1);margin-top: 9px;padding: 15px;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	642	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Content-Type: image/gif
2024-10-13 15:48:38 UTC	4178	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	623	OUT	GET /sep.png HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Content-Type: image/png
2024-10-13 15:48:38 UTC	1240	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'y*hux]]wQuVu7KUbW#y@1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	623	OUT	GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support-ld-maps.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support-ld-maps.info/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	263	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:48:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-10-13 15:48:38 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-10-13 15:48:38 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	623	OUT	GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support-ld-maps.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support-ld-maps.info/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:38 UTC	263	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:48:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-10-13 15:48:38 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-10-13 15:48:38 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	351	OUT	GET /sep.png HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:39 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Content-Type: image/png
2024-10-13 15:48:39 UTC	1240	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'y*hux]]wQuVu7KUbW#y@1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:38 UTC	370	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:39 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Content-Type: image/gif
2024-10-13 15:48:39 UTC	4178	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:39 UTC	622	OUT	GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support-ld-maps.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support-ld-maps.info/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:39 UTC	263	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:48:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-10-13 15:48:39 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-10-13 15:48:39 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:39 UTC	622	OUT	GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support-ld-maps.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support-ld-maps.info/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:39 UTC	263	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:48:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-10-13 15:48:39 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-10-13 15:48:39 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:48:40 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=176215 Date: Sun, 13 Oct 2024 15:48:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:40 UTC	627	OUT	GET /favicon.ico HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support-ld-maps.info/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:40 UTC	306	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 15:48:40 GMT Content-Type: image/x-icon
2024-10-13 15:48:40 UTC	7886	IN	Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
2024-10-13 15:48:40 UTC	1176	IN	Data Raw: fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 8c 8c 33 5b 5b 5b 38 00 00 00 00 00 00 00 00 00 00 00 00 50 50 50 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 3d 3d 50 50 50 50 ef 5b 5b 5b ff 5c 5c 5c cf 5c 5c 5c bf 5c 5c 5c Data Ascii: ?( 3[[[8PPP0===PPPP[[[\\\\\\\\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	50.6.138.164	443	2688	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:40 UTC	355	OUT	GET /favicon.ico HTTP/1.1 Host: support-ld-maps.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 15:48:40 UTC	306	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:48:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 15:48:40 GMT Content-Type: image/x-icon
2024-10-13 15:48:40 UTC	7886	IN	Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
2024-10-13 15:48:40 UTC	1176	IN	Data Raw: fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 8c 8c 33 5b 5b 5b 38 00 00 00 00 00 00 00 00 00 00 00 00 50 50 50 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3d 3d 3d 50 50 50 50 ef 5b 5b 5b ff 5c 5c 5c cf 5c 5c 5c bf 5c 5c 5c Data Ascii: ?( 3[[[8PPP0===PPPP[[[\\\\\\\\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:48:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:48:41 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=176155 Date: Sun, 13 Oct 2024 15:48:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 15:48:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	51125	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:31 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:31 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:31 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154931Z-17db6f7c8cfnqpbkckdefmqa44000000050g00000000d7xr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:31 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 15:49:31 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	51128	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:32 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:32 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: a7c7bcc3-d01e-005a-1c62-1c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154932Z-17db6f7c8cf96l6t7bwyfgbkhw000000042000000000bv53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:32 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	51126	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:32 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:32 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154932Z-17db6f7c8cfcl4jvqfdxaxz9w800000002m0000000001wtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:32 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	51130	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:32 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:32 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154932Z-17db6f7c8cfp6mfve0htepzbps00000004k0000000005bdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:32 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	51127	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:32 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:32 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: c1f175ba-101e-0028-7611-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154932Z-17db6f7c8cffhvbz3mt0ydz7x400000003c0000000002k50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:32 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	51129	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:32 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:32 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:32 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 995dd301-801e-0035-24cd-1a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154932Z-17db6f7c8cf6qp7g7r97wxgbqc00000004dg0000000092m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:32 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	51132	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:33 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:33 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154933Z-17db6f7c8cfqkqk8bn4ck6f72000000004v0000000009k1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:33 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	51133	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:33 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:33 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154933Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000dz2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:33 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	51134	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:33 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154933Z-17db6f7c8cf4g2pjavqhm24vp4000000059000000000abq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	51135	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:33 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154933Z-17db6f7c8cfq2j6f03aq9y8dns0000000490000000008y65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	51131	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:33 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154933Z-17db6f7c8cfbr2wt66emzt78g400000004p0000000006rg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	51138	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:34 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154934Z-17db6f7c8cfbd7pgux3k6qfa6000000003x000000000e33p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	51136	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:34 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154934Z-17db6f7c8cfbr2wt66emzt78g400000004k000000000d5vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	51140	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:34 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:34 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: daf35764-401e-008c-13df-1b86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154934Z-17db6f7c8cf8rgvlb86c9c0098000000036g000000007kud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:34 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	51137	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:34 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154934Z-17db6f7c8cfqkqk8bn4ck6f72000000004w0000000007bem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	51139	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:34 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154934Z-17db6f7c8cf5mtxmr1c51513n000000005cg000000001aq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	51142	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cfqxt4wrzg7st2fm8000000055g00000000aeuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	51143	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cfqkqk8bn4ck6f72000000004vg000000008nt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	51145	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cfnqpbkckdefmqa44000000052000000000c0yy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	51146	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cf6qp7g7r97wxgbqc00000004h000000000167y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	51144	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cf9wwz8ehu7c5p33g00000002cg000000006wn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	51147	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154936Z-17db6f7c8cfwtn5x6ye8p8q9m000000003hg00000000g6tn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	51148	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154936Z-17db6f7c8cf9c22xp43k2gbqvn00000002mg00000000fg1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	51149	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cfnqpbkckdefmqa44000000052g000000009m6d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:36 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	51150	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9a785c76-f01e-0071-7218-1c431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154936Z-17db6f7c8cfvtw4hh2496wp8p800000003n0000000001r7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	51151	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:35 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154935Z-17db6f7c8cfcl4jvqfdxaxz9w800000002dg00000000bn8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:36 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	51152	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:37 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 483006ab-801e-0035-465b-1c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154937Z-17db6f7c8cfcrfgzd01a8emnyg00000002k000000000akyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:37 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	51153	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154937Z-17db6f7c8cfspvtq2pgqb2w5k000000004yg00000000aegg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	51156	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:37 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154937Z-17db6f7c8cfqkqk8bn4ck6f72000000004vg000000008nwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:37 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	51154	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:37 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154937Z-17db6f7c8cfbr2wt66emzt78g400000004h000000000e4yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	51155	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154937Z-17db6f7c8cf96l6t7bwyfgbkhw0000000440000000007w92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	51159	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfvq8pt2ak3arkg6n0000000350000000003r4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	51160	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfnqpbkckdefmqa4400000005400000000066fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	51157	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 574f47a0-001e-0028-2c81-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfgqlr45m385mnngs00000003sg000000000fv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	51158	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfhrxld7punfw920n00000003ug00000000960e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	51161	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfgqlr45m385mnngs00000003rg000000002c2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	51162	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: fbd0b5f8-a01e-0053-6218-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cffhvbz3mt0ydz7x400000003bg000000003ks4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	51163	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e8d3a0af-c01e-0014-0c1c-1ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfpm9w8b1ybgtytds00000002y000000000dc3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	51165	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e237e346-101e-0079-251d-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfvq8pt2ak3arkg6n0000000350000000003r5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	51164	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154938Z-17db6f7c8cfbd7pgux3k6qfa6000000004300000000017e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	51166	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154939Z-17db6f7c8cfqkqk8bn4ck6f72000000004y0000000003506 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	51168	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154940Z-17db6f7c8cfpm9w8b1ybgtytds00000002yg00000000csrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:40 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	51170	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:40 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c027d4fd-301e-005d-2016-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154940Z-17db6f7c8cfvtw4hh2496wp8p800000003eg00000000e0gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:40 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	51172	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:40 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154940Z-17db6f7c8cf4g2pjavqhm24vp400000005c0000000003b0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	51169	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:40 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154940Z-17db6f7c8cfbr2wt66emzt78g400000004p0000000006rsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	51171	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:40 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:40 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154940Z-17db6f7c8cf4g2pjavqhm24vp400000005bg000000004g5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:40 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	51173	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:41 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: cb11dd2f-401e-0029-235b-1c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154941Z-17db6f7c8cffhvbz3mt0ydz7x400000003cg00000000147z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	51176	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:41 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c769d364-a01e-0032-511e-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154941Z-17db6f7c8cfnqpbkckdefmqa44000000054g000000006q1v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	51174	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:41 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154941Z-17db6f7c8cfqkqk8bn4ck6f72000000004u000000000caaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	51175	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:41 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d280ac0f-001e-0079-3c69-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154941Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg000000006pan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	51177	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:41 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: c8f4023d-c01e-0082-7904-1caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154941Z-17db6f7c8cfvtw4hh2496wp8p800000003kg0000000057pt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	51179	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 0e087f1c-801e-00ac-7d47-1cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cf9wwz8ehu7c5p33g000000029000000000e0nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	51180	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b0fa5ee8-501e-0047-295e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfjxfnba42c5rukwg000000021000000000aaz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	51178	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cf9wwz8ehu7c5p33g00000002d0000000005x26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	51181	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfbd7pgux3k6qfa6000000004300000000017kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	51182	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: dd0a9e0e-c01e-002b-7a7e-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfp6mfve0htepzbps00000004e000000000ckmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	51183	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a709d5d-301e-0099-436d-1c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfvzwz27u5rnq9kpc00000005cg000000009rgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	51185	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: b92a0ccf-a01e-0002-4a21-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfvq8pt2ak3arkg6n000000031g00000000b7dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:42 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	51186	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cfvq8pt2ak3arkg6n0000000340000000005cqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	51187	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154942Z-17db6f7c8cffhvbz3mt0ydz7x400000003d00000000001q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	51188	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:43 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154943Z-17db6f7c8cf6qp7g7r97wxgbqc00000004ag00000000ekbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	51189	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:43 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154943Z-17db6f7c8cf6qp7g7r97wxgbqc00000004hg0000000002c9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	51191	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:43 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:43 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1bfa4875-a01e-0084-0b1c-1c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154943Z-17db6f7c8cf9c22xp43k2gbqvn00000002mg00000000fg90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	51190	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:43 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:43 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d2b2f6f8-f01e-0085-0622-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154943Z-17db6f7c8cf6f7vv3recfp4a6w000000023g00000000bsrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:43 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	51184	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d286cfb1-001e-0079-076b-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154944Z-17db6f7c8cffhvbz3mt0ydz7x400000003b0000000004rm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:44 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	51192	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: c0a86c07-d01e-007a-0a2f-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154944Z-17db6f7c8cf6f7vv3recfp4a6w000000022000000000dwxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	51194	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154944Z-17db6f7c8cfvtw4hh2496wp8p800000003m0000000003u1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:44 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	51193	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: fdc7e0a4-c01e-0034-181f-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154944Z-17db6f7c8cfnqpbkckdefmqa44000000050000000000fcy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	51195	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c2b82db-e01e-0071-3c2b-1c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154944Z-17db6f7c8cfcrfgzd01a8emnyg00000002mg000000007zk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	51196	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:44 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfqxt4wrzg7st2fm8000000052g00000000ghst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	51197	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: a550391c-b01e-003d-7d1d-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfvtw4hh2496wp8p800000003gg00000000955v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	51198	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfpm9w8b1ybgtytds00000002y000000000dcap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	51199	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfwtn5x6ye8p8q9m000000003t0000000000wwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	51200	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfspvtq2pgqb2w5k0000000050g000000006a4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	51201	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cfq2j6f03aq9y8dns000000048g000000008xkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	51202	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:45 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:45 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 36d40921-f01e-0085-6daa-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154945Z-17db6f7c8cf8rgvlb86c9c0098000000039g0000000023v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	51203	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 745077d4-d01e-0082-7c4a-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cfqkqk8bn4ck6f72000000004s000000000fqv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	51204	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cfbr2wt66emzt78g400000004qg000000003k7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	51205	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cf4g2pjavqhm24vp4000000056000000000fnmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	51206	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cfhrxld7punfw920n00000003w0000000006evk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	51207	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cf6qp7g7r97wxgbqc00000004ag00000000ekes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	51208	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cfgqlr45m385mnngs00000003kg00000000c4p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	51209	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cfbr2wt66emzt78g400000004m0000000009nss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	51210	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:46 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154946Z-17db6f7c8cf9wwz8ehu7c5p33g00000002b000000000aatk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	51211	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:47 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:47 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154947Z-17db6f7c8cfhzb2znbk0zyvf6n00000004r000000000c1bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	51212	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:47 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3704a696-901e-0048-3641-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154947Z-17db6f7c8cfvq8pt2ak3arkg6n000000034g0000000048gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	51213	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154947Z-17db6f7c8cfqxt4wrzg7st2fm8000000055000000000b641 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	51214	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5e8e1097-501e-0029-33de-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154947Z-17db6f7c8cf9wwz8ehu7c5p33g00000002fg000000000hsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	51215	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:47 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154947Z-17db6f7c8cf6qp7g7r97wxgbqc00000004e0000000006w1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	51216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: f7510ca4-501e-000a-5e6f-1c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cf9c22xp43k2gbqvn00000002qg00000000aekr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:48 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	51217	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cfmhggkx889x958tc000000027000000000bgtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	51218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cfnqpbkckdefmqa44000000052g000000009mkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	51219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cfgqlr45m385mnngs00000003m000000000ck7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	51220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:48 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5e6ff04f-301e-0033-6022-1cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cfpm9w8b1ybgtytds0000000320000000006256 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	51221	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:48 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6666e0d8-401e-0078-0e1c-1c4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154948Z-17db6f7c8cfpm9w8b1ybgtytds000000030g000000008ddb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	51222	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cfgqlr45m385mnngs00000003pg000000006vqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	51223	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cfbd7pgux3k6qfa60000000041g000000004cyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	51224	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cffhvbz3mt0ydz7x400000003b0000000004rz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	51225	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cfpm9w8b1ybgtytds00000002y000000000dcf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	51226	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cf6qp7g7r97wxgbqc00000004c000000000bftq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	51227	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:49 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6d1bd684-201e-00aa-7f91-1c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cf9wwz8ehu7c5p33g00000002a000000000c9b8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	51228	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cfpm9w8b1ybgtytds000000032g000000004gpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	51229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:49 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154949Z-17db6f7c8cfbr2wt66emzt78g400000004h000000000e5h0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	51230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:49 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: b5288d5f-901e-008f-111b-1c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cfvtw4hh2496wp8p800000003k0000000006ac6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	51231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cfq2j6f03aq9y8dns00000004bg000000004g81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	51232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:50 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: b9db8c53-a01e-0002-5a69-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cfcrfgzd01a8emnyg00000002kg00000000b6pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	51233	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:50 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: f4458a97-001e-0028-604a-1cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cfjxfnba42c5rukwg000000021000000000ab81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	51234	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:50 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cf4g2pjavqhm24vp4000000058g00000000bnaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	51235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:50 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4f40437f-401e-005b-17e8-1c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154950Z-17db6f7c8cfjxfnba42c5rukwg00000001y000000000fq3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	51236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:51 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 92868876-901e-0016-791d-1cefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154951Z-17db6f7c8cfvtw4hh2496wp8p800000003dg00000000g5pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	51237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:51 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 540e34d0-301e-0096-5f1b-1ce71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154951Z-17db6f7c8cf8rgvlb86c9c0098000000033g00000000eduq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:51 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	51239	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:51 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154951Z-17db6f7c8cfhzb2znbk0zyvf6n00000004w0000000001sn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	51238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:51 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154951Z-17db6f7c8cfnqpbkckdefmqa440000000570000000000tq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:51 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	51240	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:51 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 3711f2de-901e-0048-5247-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154951Z-17db6f7c8cfpm9w8b1ybgtytds00000002z000000000c8w2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	51242	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c263a70-701e-0098-1b5d-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cf9c22xp43k2gbqvn00000002q000000000afbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	51241	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfqkqk8bn4ck6f72000000004u000000000catn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	51245	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: d184da79-201e-0085-6797-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfwtn5x6ye8p8q9m000000003mg00000000c3ng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	51244	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfvzwz27u5rnq9kpc00000005d00000000087k1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	51243	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: a05efbea-801e-00a3-1b29-1c7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfjxfnba42c5rukwg000000023g0000000053fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	51246	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfhrxld7punfw920n00000003xg000000002w5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	51247	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:52 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:52 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 71b03e0b-301e-0052-60b9-1c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154952Z-17db6f7c8cfmhggkx889x958tc000000027g00000000b6t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	51248	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4aa12048-401e-0016-46e6-1c53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cf6f7vv3recfp4a6w000000021g00000000e4t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	51249	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 056f3a33-b01e-0097-671a-1c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cf8rgvlb86c9c0098000000034g00000000cp27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	51250	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: d15b385d-801e-0047-591b-1c7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cfcrfgzd01a8emnyg00000002h000000000cydv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	51251	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: bb1c3872-701e-0050-4447-1c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cf6f7vv3recfp4a6w000000027g000000002myx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	51252	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: b5dfe12a-901e-008f-1362-1c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cfcrfgzd01a8emnyg00000002q0000000002rxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	51253	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cfspvtq2pgqb2w5k0000000050g000000006adx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	51254	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b0bf752c-501e-0047-5047-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cf4g2pjavqhm24vp4000000056000000000fnwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	51255	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:53 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:53 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 1c2441a4-201e-0051-796b-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154953Z-17db6f7c8cfpm9w8b1ybgtytds00000002y000000000dcqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:53 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	51256	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:54 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:54 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4ec1f56b-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154954Z-17db6f7c8cf6f7vv3recfp4a6w0000000260000000005m7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:54 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	51257	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:54 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154954Z-17db6f7c8cfqkqk8bn4ck6f72000000004t000000000cqen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	51258	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:54 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b05a7aca-501e-0047-5422-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154954Z-17db6f7c8cf8rgvlb86c9c0098000000035g00000000a8a2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	51259	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:54 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:54 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154954Z-17db6f7c8cfhrxld7punfw920n00000003ug00000000983q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:54 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	51260	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:49:54 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:49:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:49:54 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 2ae22a5c-001e-0046-6b1b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T154954Z-17db6f7c8cfwtn5x6ye8p8q9m000000003ng00000000ae9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:49:54 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3220, Parent PID: 5824

General

Target ID:	0
Start time:	11:48:30
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2688, Parent PID: 3220

General

Target ID:	2
Start time:	11:48:32
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2204,i,13424152147592093039,6643963405431631558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 5824

General

Target ID:	3
Start time:	11:48:35
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://support-ld-maps.info/icloud-archivos/code2022esp.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://support-ld-maps.info/icloud-archivos/code2022esp.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://support-ld-maps.info/icloud-archivos/code2022esp.php